Loading...
Loading...
The current XR/NTP code allows 'mode 6' but not 'mode 7'. There is code to restrict mode 6 as well, if "restrict default noquery? is specified but no CLI way to set it, while 'mode 7' is rejected without any checks in current XR code base. We need to change the code to reject 'mode 6' without checks as well in the XR code base. In IOS we have the bug CSCum44673 that is specifically tracking NTP MODE6 vulnerability.
NTP mode 6
None
None.
The Cisco PSIRT has evaluated this issue and does not meet the criteria for PSIRT ownership or involvement. This issue will be addressed via normal resolution channels. If you believe that there is new information that would cause a change in the severity of this issue, please contact psirt@cisco.com for another evaluation. Additional information on Cisco''s security vulnerability policy can be found at the following URL: http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html
Click on a version to see all relevant bugs
Cisco Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.