Full Disclosure: ntpd segfaults accessing IPv6 hosts

[Bernhard Kuemel <bernhard () bksys at>]

Hi full-disclosure!

ntpd 1:4.2.0a-11 (as in debian testing/sarge and unstable/sid) 
segfaults when accessing ntp servers on IPv6 hosts. I don't know 
whether this bug is exploitable. But such a server on 
pool.ntp.org might DoS many servers.
There is a fixed version available.

For more details see http://bugzilla.ntp.org/show_bug.cgi?id=353

Bernhard

--
Webspace; Low end Serverhousing ab 15 e, etc.: http://www.bksys.at
Linux Admin/Programmierer: http://bksys.at/bernhard/services.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html