CVE-2015-7703

Name	CVE-2015-7703
Description	The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more)
References	DLA-335-1, DSA-3388-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
ntp (PTS)	buster	1:4.2.8p12+dfsg-4	fixed
	bullseye	1:4.2.8p15+dfsg-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
ntp	source	squeeze	1:4.2.6.p2+dfsg-1+deb6u4	DLA-335-1
ntp	source	wheezy	1:4.2.6.p5+dfsg-2+deb7u6	DSA-3388-1
ntp	source	jessie	1:4.2.6.p5+dfsg-7+deb8u1	DSA-3388-1
ntp	source	(unstable)	1:4.2.8p4+dfsg-1

Notes

http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_Security_Vulner
https://github.com/ntp-project/ntp/commit/5dea6ff160c7e8f7cb038619ccccd28c3a8df637
https://github.com/ntp-project/ntp/commit/cdae0f1369ade98dc7ae912a0f1953b6e533cb88