ISOMAN

CVE

CVE-2016-0727

The crontab script in the ntp package before 1:4.2.6.p3+dfsg-1ubuntu3.11 on Ubuntu 12.04 LTS, before 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10 on Ubuntu 14.04 LTS, on Ubuntu Wily, and before 1:4.2.8p4+dfsg-3ubuntu5.3 on Ubuntu 16.04 LTS allows local users with access to the ntp account to write to arbitrary files and consequently gain privileges via vectors involving statistics directory cleanup.

Severity
HIGH
CVSS
7.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://packetstormsecurity.com/files/141913/NTP-Privilege-Escalation.html
  2. http://www.securityfocus.com/bid/81552
  3. http://www.securitytracker.com/id/1034808
  4. http://www.ubuntu.com/usn/USN-3096-1
  5. https://bugs.launchpad.net/ubuntu/+source/ntp/+bug/1528050
  6. https://bugzilla.redhat.com/show_bug.cgi?id=1382369
  7. http://packetstormsecurity.com/files/141913/NTP-Privilege-Escalation.html
  8. http://www.securityfocus.com/bid/81552
  9. http://www.securitytracker.com/id/1034808
  10. http://www.ubuntu.com/usn/USN-3096-1
  11. https://bugs.launchpad.net/ubuntu/+source/ntp/+bug/1528050
  12. https://bugzilla.redhat.com/show_bug.cgi?id=1382369