Vulnslist

Cisco vulnerabilities by product, model, software, and advisory.

CVE-2015-7703

The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command.

SeverityHIGH
CVSS7.5
CWECWE-20
KEV
Published
Modified

Related Products

Product Advisory Evidence
Intrusion Prevention System (IPS) cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Wide Area Application Services (WAAS) cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Webex Meetings cisco-sa-20151021-ntp Cisco OpenVuln
Cisco WebEx Node for MCS cisco-sa-20151021-ntp Cisco OpenVuln
Cisco WebEx Meetings Server cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Visual Quality Experience cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Virtualization Experience Client 6000 Series Firmware cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Virtual Topology System (VTS) cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Virtual Security Gateway for Nexus 1000V Series Switches cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Videoscape Policy Resource Manager cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Videoscape Distribution Suite Transparent Caching (VDS TC) cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Video Surveillance Media Server Software cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Unity Express cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Unity Connection cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Unity cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Unified SIP Proxy cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Unified Provisioning Manager cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Unified Presence Server cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Unified Intelligence Center cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Unified Contact Center Enterprise cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Unified Contact Center cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Unified Computing System Central Software cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Unified Computing System (Management Software) cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Unified Communications Manager cisco-sa-20151021-ntp Cisco OpenVuln
Cisco UCS Director cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Telepresence MXP Series Endpoints cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Telepresence Conductor cisco-sa-20151021-ntp Cisco OpenVuln
Cisco TelePresence Video Communication Server (VCS) cisco-sa-20151021-ntp Cisco OpenVuln
Cisco TelePresence TE Software cisco-sa-20151021-ntp Cisco OpenVuln
Cisco TelePresence TC Software cisco-sa-20151021-ntp Cisco OpenVuln
Cisco TelePresence Manager cisco-sa-20151021-ntp Cisco OpenVuln
Cisco TelePresence ISDN Link cisco-sa-20151021-ntp Cisco OpenVuln
Cisco TelePresence cisco-sa-20151021-ntp Cisco OpenVuln
Cisco SocialMiner cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Show and Share cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Service Control Engine (SCE) cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Secure Access Control System (ACS) cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Prime Service Catalog cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Prime Security Manager (PRSM) cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Prime License Manager cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Prime Infrastructure cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Prime Data Center Network Manager (DCNM) cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Prime Collaboration Deployment cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Prime Collaboration cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Physical Access Gateway cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Nexus 3000 Series Switch cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Nexus 1000V Switch cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Network Admission Control Guest Server cisco-sa-20151021-ntp Cisco OpenVuln
Cisco NX-OS Software cisco-sa-20151021-ntp Cisco OpenVuln
Cisco NAC Appliance Software cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Modular Encoding Platform D9036 cisco-sa-20151021-ntp Cisco OpenVuln
Cisco MediaSense cisco-sa-20151021-ntp Cisco OpenVuln
Cisco MXE 3500 (Media Experience Engine) cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Jabber Guest cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Jabber cisco-sa-20151021-ntp Cisco OpenVuln
Cisco IronPort Encryption Appliance cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Intrusion Prevention System (IPS) cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Identity Services Engine Software cisco-sa-20151021-ntp Cisco OpenVuln
Cisco IP Interoperability and Communications System (IPICS) cisco-sa-20151021-ntp Cisco OpenVuln
Cisco IP Interoperability and Collaboration System (IPICS) cisco-sa-20151021-ntp Cisco OpenVuln
Cisco IOS XR Software cisco-sa-20151021-ntp Cisco OpenVuln
Cisco IOS XE Software cisco-sa-20151021-ntp Cisco OpenVuln
Cisco IOS cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Hosted Collaboration Mediation Fulfillment cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Firepower System Software cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Finesse cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Expressway cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Enterprise Content Delivery System (ECDS) cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Emergency Responder cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Edge 300 Series cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Digital Media Manager Software cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Digital Content Manager (DCM) Software cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Connected Grid Network Management System (CG-NMS) cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Cloud Services Platforms cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Cloud Services Platform 2100 cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Application and Content Networking System (ACNS) Software cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Application Policy Infrastructure Controller (APIC) cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Application Networking Manager (ANM) cisco-sa-20151021-ntp Cisco OpenVuln
Cisco ASR 5000 Series Software cisco-sa-20151021-ntp Cisco OpenVuln
Cisco ASA CX Context-Aware Security Software cisco-sa-20151021-ntp Cisco OpenVuln
Cisco ACE Application Control Engine Module cisco-sa-20151021-ntp Cisco OpenVuln
Cisco ACE 4700 Series Application Control Engine Appliances cisco-sa-20151021-ntp Cisco OpenVuln
Application and Content Networking System (ACNS) Software cisco-sa-20151021-ntp Cisco OpenVuln
Cisco Catalyst 9600 Series Switches cisco-sa-20151021-ntp Cisco OpenVuln · software-dependent
Cisco Catalyst 9500 Series Switches cisco-sa-20151021-ntp Cisco OpenVuln · software-dependent
Cisco Catalyst 9400 Series Switches cisco-sa-20151021-ntp Cisco OpenVuln · software-dependent
Cisco Catalyst 9300 Series Switches cisco-sa-20151021-ntp Cisco OpenVuln · software-dependent
Cisco Catalyst 9200 Series Switches cisco-sa-20151021-ntp Cisco OpenVuln · software-dependent