Vulnerability in Dave_mills Ntpd

CVE-2005-2496

The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with different privileges than intended.

EPSS: 0.004 (36.1th percentile) — read the EPSS interpretation.

Affected products

References