CVE-2015-7976

The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows…

published January 30, 2017

CVSS
—
EPSS
4%
Percentile
89.3
In the wild
Unconfirmed
What it is

The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03580 · 89.3th percentile
Published
2017-01-30T21:00Z
EPSS history
Timeline
  • 30 JAN 21:00Z
    The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows…
    cvelistv5