Security Advisories (MDKSA-2005:156): ntp

[aru]

Mandriva Security Advisories MDKSA-2005:156 : ntp

 

Updated ntp packages fix small security-related issue.

September 6th, 2005

 

When starting xntpd with the -u option and specifying the group by using a string not a numeric gid the daemon uses the gid of the user not the group.

 

The updated packages have been patched to correct this problem.

 

 

The released versions of Mandriva GNU/Linux affected are:

• 10.2
  

Full information about this advisory, including the updated packages, is available at:

www.mandriva.com/security/advisories?name=MDKSA-2005:156

 

Other references:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2496

 

Posted automatically by aru (mdksec2mub v: mdksec2mub,v 0.14 2005/05/15 18:06:11 aru Exp aru $)