From owner-freebsd-security@FreeBSD.ORG  Thu Sep 25 06:05:33 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 9930916A4B3
	for <security@freebsd.org>; Thu, 25 Sep 2003 06:05:33 -0700 (PDT)
Received: from gw.celabo.org (gw.celabo.org [208.42.49.153])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 88E3D44058
	for <security@freebsd.org>; Thu, 25 Sep 2003 06:05:30 -0700 (PDT)
	(envelope-from nectar@celabo.org)
Received: from madman.celabo.org (madman.celabo.org [10.0.1.111])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(Client CN "madman.celabo.org", Issuer "celabo.org CA" (verified OK))
	by gw.celabo.org (Postfix) with ESMTP
	id 1C51D54840; Thu, 25 Sep 2003 08:05:30 -0500 (CDT)
Received: by madman.celabo.org (Postfix, from userid 1001)
	id ABFBF6D454; Thu, 25 Sep 2003 08:05:29 -0500 (CDT)
Date: Thu, 25 Sep 2003 08:05:29 -0500
From: "Jacques A. Vidrine" <nectar@FreeBSD.org>
To: Mike Tancsa <mike@sentex.net>
Message-ID: <20030925130529.GF64188@madman.celabo.org>
References: <6.0.0.22.0.20030923170736.06cad540@209.112.4.2>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <6.0.0.22.0.20030923170736.06cad540@209.112.4.2>
X-Url: http://www.celabo.org/
User-Agent: Mutt/1.5.4i-ja.1
cc: security@freebsd.org
Subject: Re: NTP common code base ?
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 25 Sep 2003 13:05:33 -0000

On Tue, Sep 23, 2003 at 05:10:36PM -0400, Mike Tancsa wrote:
> 
> Cisco released an advisory about their ntp client and server having a bug
> http://www.cisco.com/warp/public/707/NTP-pub.shtml
> 
> Is there a common code base at all that would have relevance to the code in 
> FreeBSD ? I noticed in the COPYRIGHT file cisco has made some contributions.

Yes, there is shared code.  It seems likely that this is an old NTP
bug, probably the one covered in FreeBSD-SA-01:31.ntpd.

Cheers,
-- 
Jacques Vidrine   . NTT/Verio SME      . FreeBSD UNIX       . Heimdal
nectar@celabo.org . jvidrine@verio.net . nectar@freebsd.org . nectar@kth.se