Test ID:	1.3.6.1.4.1.25623.1.0.55233
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-801-1)
Summary:	The remote host is missing an update for the Debian 'ntp' package(s) announced via the DSA-801-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'ntp' package(s) announced via the DSA-801-1 advisory. Vulnerability Insight: SuSE developers discovered that ntp confuses the given group id with the group id of the given user when called with a group id on the commandline that is specified as a string and not as a numeric gid, which causes ntpd to run with different privileges than intended. The old stable distribution (woody) is not affected by this problem. For the stable distribution (sarge) this problem has been fixed in version 4.2.0a+stable-2sarge1. The unstable distribution (sid) is not affected by this problem. We recommend that you upgrade your ntp-server package. Affected Software/OS: 'ntp' package(s) on Debian 3.1. Solution: Please install the updated package(s). CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2496 1016679 http://securitytracker.com/id?1016679 14673 http://www.securityfocus.com/bid/14673 16602 http://secunia.com/advisories/16602 19055 http://www.osvdb.org/19055 21464 http://secunia.com/advisories/21464 ADV-2005-1561 http://www.vupen.com/english/advisories/2005/1561 DSA-801 http://www.debian.org/security/2005/dsa-801 FEDORA-2005-812 http://www.securityspace.com/smysecure/catid.html?id=55155 MDKSA-2005:156 http://www.mandriva.com/security/advisories?name=MDKSA-2005:156 RHSA-2006:0393 http://www.redhat.com/support/errata/RHSA-2006-0393.html ntp-incorrect-group-permissions(22035) https://exchange.xforce.ibmcloud.com/vulnerabilities/22035 oval:org.mitre.oval:def:9669 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9669
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.