Integer overflow in Hp Tru64 Unix

CVE-2004-0657

Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time.

Vulnerability class: Integer Overflow

EPSS: 0.029 (85.3th percentile) — read the EPSS interpretation.

Affected products

Hp Tru64_unix — versions 4.0f, 4.0g, 5.1b
Ntp
N/a — versions n/a

Weakness classification (CWE)

CWE-190 — Integer Overflow or Wraparound

References

cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, Third Party Advisory, third-party-advisory)
cve@mitre.org (x_refsource_HP, vendor-advisory, Mailing List, Third Party Advisory)