Vulnetix
Try Vulnetix Request Demo
CVE-2015-7851 PUBLISHED CVSS 6.5 MEDIUM

Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files.

EPSS 0.53% · 67.1th percentile

Risk Scores

CVSS v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS Score
0.53%
67.1th percentile

Affected Products

VendorProductVersions
n/an/an/a
ntpntp4.2.0, 4.3.0, 4.2.8

Timeline

References

Open in Interactive Console →