CVE-2004-0657

Description

Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time.

Weakness classification

• CWE-190: Integer Overflow or Wraparound

Primary references

• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Patch, Third Party Advisory, US Government Resource
• cve@mitre.org — Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory, US Government Resource
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry