False Positive? Network Time Protocol Daemon crypto-NAK Authentication Bypass Vulnerability

Josh.Thompson — Wed, 14 Sep 2016 12:30:01 GMT

Name: Network Time Protocol Daemon crypto-NAK Authentication Bypass Vulnerability

Unique Threat ID: 39734

critical

CVE-2015-7871

FIRST RELEASE

612 (2016-09-14 UTC)

LAST UPDATE

612 (2016-09-14 UTC)

Anyone else seeing lots of "Threat Alerts" for this signature? Just started seeing these Threat Alerts come in from multiple PA-500's for our orginization starting around the first release date and time. (09-14-2016)

We are going to ask Palo Alto Networks Support for some additional insight.

Re: False Positive? Network Time Protocol Daemon crypto-NAK Authentication Bypass Vulnerability

Josh.Thompson — Wed, 14 Sep 2016 13:09:33 GMT

UPDATE:

Palo Alto Networks Support Team has verified this is a False Positve and an update to the Threat DB will be release tomorrow morning to address this problem.

topic False Positive? Network Time Protocol Daemon crypto-NAK Authentication Bypass Vulnerability in General Topics

False Positive? Network Time Protocol Daemon crypto-NAK Authentication Bypass Vulnerability

Re: False Positive? Network Time Protocol Daemon crypto-NAK Authentication Bypass Vulnerability