[ntp:security] [Bug 2781] authentication doesn't protect symmetric associations against DoS attacks

bugzilla-daemon at ntp.org bugzilla-daemon at ntp.org
Wed May 20 20:38:27 UTC 2015


http://bugs.ntp.org/show_bug.cgi?id=2781

--- Comment #10 from Danny Mayer <mayer at ntp.org> 2015-05-20 20:38:27 UTC ---
(In reply to comment #9)
> Thanks Danny for quick response. 
> 
> We have commitment to support it for some more time in our products.
> 
> If possible can you please help :
> - how to know if 3.5 is impacted
> - is there any fix available
> 
> Thanks for help.

That version of NTP is something like 20 years old. If you have committed to
support the same version what prevents you from providing the upgrade to the
latest version? Support could be available for this ancient version but it
could not be done for free.

Danny

-- 
Configure bugmail: http://bugs.ntp.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.


More information about the security mailing list