CVE-2001-0414

Dave Mills Ntpd < 4.0.99k - Buffer Overflow

Title source: rule

Description

Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.

Exploits (4)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotelinux
https://www.exploit-db.com/exploits/16285
exploitdb WORKING POC VERIFIED
by patrick · rubyremotelinux
https://www.exploit-db.com/exploits/9940
exploitdb WORKING POC VERIFIED
by babcia padlina ltd · cremotelinux
https://www.exploit-db.com/exploits/20727
metasploit WORKING POC GOOD
rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/ntp/ntp_overflow.rb

References (24)

... and 4 more

Scores

EPSS 0.8116
EPSS Percentile 99.2%

Details

Status published
Products (18)
dave_mills/ntpd 4.0.99
dave_mills/ntpd 4.0.99a
dave_mills/ntpd 4.0.99b
dave_mills/ntpd 4.0.99c
dave_mills/ntpd 4.0.99d
dave_mills/ntpd 4.0.99e
dave_mills/ntpd 4.0.99f
dave_mills/ntpd 4.0.99g
dave_mills/ntpd 4.0.99h
dave_mills/ntpd 4.0.99i
... and 8 more
Published Jun 18, 2001
Tracked Since Feb 18, 2026