Re: NTP scan ????

From: Will Aoki (waoki@umnh.utah.edu)
Date: 02/27/02


From: Will Aoki <waoki@umnh.utah.edu>
Date: Tue, 26 Feb 2002 18:52:45 -0700
To: incidents@securityfocus.com

On Wed, Feb 27, 2002 at 10:43:19AM +1300, Russell Fulton wrote:
> Just picked up a SYN scan for NTP. There were problems with xntp a
> while back, I wonder if there is now an exploit out there...

I saw a SYN scan for port 123 from serv000.vj.worldonline.dk
(213.237.6.5) at 22:13 GMT-7 on the 20th, but I figured that it must
be something other than NTP, since AFAIK NTP only runs over UDP.

-- 
William Aoki     waoki@umnh.utah.edu       /"\  ASCII Ribbon Campaign
3B0A 6800 8A1A 78A7 9A26 BB92              \ /  No HTML in mail or news!
9A26 BB92 6329 2D3E 199D 8C7B               X
                                           / \

---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com



Relevant Pages

  • NTP scan ????
    ... Just picked up a SYN scan for NTP. ... There were problems with xntp a ... Report from my scan detector: ...
    (Incidents)
  • Re: Indigo2 I need help
    ... On my indigo i have install xntp to synchronise clock and now i ... It uses chkconfig ntp to decide ...
    (comp.sys.sgi.apps)
  • Re: Slew mode check for NTP (Windows)
    ... i start the NTP service as "ntpd -x" and change the system time 3 ... > Appreciate if anyone could help me on Windows binary for XNTP 4.2.2 ... I have found that NTP works well on Windows systems. ...
    (comp.protocols.time.ntp)
  • Re: [SLE] Re: [suse-kde] What app in KDE to autosync my system clock with NIST?
    ... YAST, Network services..., find NTP, select a server, done :-) ... >> xntp does the job. ... Med venlig hilsen/Best regards ...
    (SuSE)
  • Re: Time Change
    ... >> If you load and start almost any time service that will take care of ... We use Multinet's XNTP. ... >NTP under TCPIP will only handle small changes, not errors as big as 3600 ...
    (comp.os.vms)