CVE-2005-2496
The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to...
The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with different privileges than intended.
Exploit likelihood
What each source reports
NVD Score used
The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with different privileges than intended.
- Record
CVE-2005-2496- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with different privileges than intended.
- Record
CVE-2005-2496- Updated
- 2026-11-02
EUVDEUVD-2005-2497 No score
The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with different privileges than intended.
- Record
EUVD-2005-2497- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rr7w-f67q-fhr8 No score
The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to...
The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with different privileges than intended.
- Record
GHSA-rr7w-f67q-fhr8- Updated
- 2026-11-02
OSV No score
The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with different privileges than intended.
- Record
CVE-2005-2496- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-2496 No score
The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with different privileges than intended.
- Record
DEBIAN-CVE-2005-2496- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ntpDebian:11 |
before 1:4.2.0a+stable-2sarge1 | 1:4.2.0a+stable-2sarge1 |
ntpDebian:3.1 |
before 1:4.2.0a+stable-2sarge1, plus listed versions 1:4.2.0a+stable-2 |
1:4.2.0a+stable-2sarge1 |
ntpRed Hat:enterprise_linux:4::as |
before 0:4.2.0.a.20040617-4.EL4.1 | 0:4.2.0.a.20040617-4.EL4.1 |
ntp-debuginfoRed Hat:enterprise_linux:4::as |
before 0:4.2.0.a.20040617-4.EL4.1 | 0:4.2.0.a.20040617-4.EL4.1 |
ntpRed Hat:enterprise_linux:4::desktop |
before 0:4.2.0.a.20040617-4.EL4.1 | 0:4.2.0.a.20040617-4.EL4.1 |
ntp-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:4.2.0.a.20040617-4.EL4.1 | 0:4.2.0.a.20040617-4.EL4.1 |
ntpRed Hat:enterprise_linux:4::es |
before 0:4.2.0.a.20040617-4.EL4.1 | 0:4.2.0.a.20040617-4.EL4.1 |
ntp-debuginfoRed Hat:enterprise_linux:4::es |
before 0:4.2.0.a.20040617-4.EL4.1 | 0:4.2.0.a.20040617-4.EL4.1 |
ntpRed Hat:enterprise_linux:4::ws |
before 0:4.2.0.a.20040617-4.EL4.1 | 0:4.2.0.a.20040617-4.EL4.1 |
ntp-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:4.2.0.a.20040617-4.EL4.1 | 0:4.2.0.a.20040617-4.EL4.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2496 is a medium vulnerability (CVSS 4.6) in Dave Mills Ntpd, published September 2, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 38th percentile. Fixed in ntp 1:4.2.0a+stable-2sarge1.
References
securityfocus.com/bid/14673
redhat.com/support/errata/RHSA-2006-0393.html
securityspace.com/smysecure/catid.html?id=55155
osvdb.org/19055
secunia.com/advisories/21464
securitytracker.com/id?1016679
Show 20 moreShow less
vupen.com/english/advisories/2005/1561
mandriva.com/security/advisories?name=MDKSA-2005:156
exchange.xforce.ibmcloud.com/vulnerabilities/22035
debian.org/security/2005/dsa-801
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9669
nvd.nist.gov/vuln/detail/CVE-2005-2496
github.com/advisories/GHSA-rr7w-f67q-fhr8
security-tracker.debian.org/tracker/CVE-2005-2496
access.redhat.com/errata/RHSA-2006:0393
bugzilla.redhat.com/show_bug.cgi?id=142926
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0393.json
cve.org/CVERecord?id=CVE-2005-2496