[ntp:hackers] CVE-2013-5211

David Malone dwmalone at maths.tcd.ie
Wed Jan 8 22:06:45 UTC 2014


> > I've changed my scripts so that it will either use an rv query or
> > an ntpdate query, depending on what the host will respond to, and
> > I'm getting much higher response rates now. It seems that the sntp
> > program doesn't print out the value of the leap bits, even in debug
> > mode, so I can't use it at the moment.

> What would you like sntp to do?

I guess in -V and/or -W mode, it would be helpful if it included the
value of the leapbits in the packet? I suppose one could parse it from
the hex dump in -W's output, but it doesn't seem like a great idea.

	David.


More information about the hackers mailing list