[Pool] ntp with monlist hidden in IPMI on server mainboard

Brian Rak brak at constant.com
Sat Feb 1 14:18:48 UTC 2014


Is it a Supermicro server?  This is a known issue with their older IPMI 
firmware.  Generally, upgrading the IPMI firmware will fix it. Or you 
can just exploit your way to root and disable NTP that way ;)

On 2/1/2014 7:04 AM, Klaus Hartnegg wrote:
> I just found a server mainboard with built in IPMI (remote
> configuration tool running in the chipset), that includes an ntp
> server which allows monlist. None of this can be disabled: not the
> monlist command, not the ntp service, and not the whole IPMI feature
> of the mainboard. And it speaks through the same ethernet jack as the
> server that runs on this hardware.
>
> Plea to all developers: the most important feature of every automatic
> thing is the switch to turn it off!
> _______________________________________________
> pool mailing list
> pool at lists.ntp.org
> http://lists.ntp.org/listinfo/pool



More information about the pool mailing list