WZZZ
Level 6 (13,112 points)
Mac OS X

Q: Snow Leopard users: Turn off automatic date and time in System Preferences immediately

http://arstechnica.com/apple/2014/12/apple-automatically-patches-macs-to-fix-sev ere-ntp-security-flaw/

 

When exploited, the NTP flaw can cause buffer overflows that allow remote attackers to execute code on your system.

What this means is that, if you allow date and time to be set automatically by outside servers, you risk having your computer taken over.

 

This is a critical issue, it's being exploited as we speak, and Apple has not provided the update to Snow Leopard users, only to 10.8/Mountain Lion and above. I strongly doubt Apple will ever get around to issuing an update for Snow Leopard, or they would have already. Chances of that happening are close to zero

Posted on Dec 23, 2014 4:37 PM

by flatsixracer,Solvedanswer
flatsixracer flatsixracer
Level 1 (10 points)
A:

To me 10.6.8 is still the best OS X Apple ever released and I patched my system just like the shellshock back in September. It's really easy if you have some basic shell skills and XCODE installed,

 

Here is what I did, it may save you some time:

 

open the terminal app

 

1) Download the source code, apply the patch (I got the source code links from the ntp site)

 

cd ~

mkdir ntpd-fix

cd ntpd-fix

curl http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/ntp-4.2.8.tar.gz | tar zxf -

 

2) Patch and compile the ntp source code

 

cd ntp-4.2.8/ntpd

curl http://bugs.ntp.org/attachment.cgi?id=1165 | patch -p1

cd ..

./configure && make

 

3) Open the system preferences - Date & Time - uncheck Set date and time automatically (to stop the process)

4) Rename the old object and then replace/copy them with the new objects

 

cd /usr/bin

sudo mv sntp sntp.old

sudo mv ntpq ntpq.old

sudo mv ntp-keygen ntp-keygen.old

 

cd /usr/sbin

sudo mv ntpdc ntpdc.old

sudo mv ntpdate ntpdate.old

sudo mv ntpd ntpd.old

 

cd ~/ntpd-fix/ntp-4.2.8

sudo cp sntp/sntp /usr/bin

sudo cp util/ntp-keygen /usr/bin

sudo cp ntpq/ntpq /usr/bin

sudo cp ntpdc/ntpdc /usr/sbin

sudo cp ntpdate/ntpdate /usr/sbin

sudo cp ntpd/ntpd /usr/sbin

 

sudo chown root:wheel /usr/bin/sntp

sudo chown root:wheel /usr/bin/ntp-keygen

sudo chown root:wheel /usr/bin/ntpq

sudo chown root:wheel /usr/sbin/ntpdc

sudo chown root:wheel /usr/sbin/ntpdate

sudo chown root:wheel /usr/sbin/ntpd

 

5) Open the system preferences - Date & Time - uncheck Set date and time automatically (to start the process)

6) Done.

 

-- update time manually

sudo ntpdate -u time.apple.com

 

-- check ntpd version (should now be: ntpd 4.2.8@1.3265-o)

sudo ntpd --version

Posted on Dec 24, 2014 12:12 PM

Close
WZZZ

Q: Snow Leopard users: Turn off automatic date and time in System Preferences immediately

  • All replies
  • Helpful answers

Previous Page 2 of 12 last Next

  • by pcbjr,

    pcbjr pcbjr Dec 24, 2014 4:47 PM in response to WZZZ
    Level 2 (282 points)
    Mac OS X
    Dec 24, 2014 4:47 PM in response to WZZZ

    Not being that savvy - is there anyone who has done a script or a dmg that will do the trick?

  • by flatsixracer,

    flatsixracer flatsixracer Dec 24, 2014 7:04 PM in response to pcbjr
    Level 1 (10 points)
    Dec 24, 2014 7:04 PM in response to pcbjr

    I build a quick and easy installer using my newly complied binaries, if you don't feel comfortable compiling your own code.

     

    Note: I searched for the solution online, compiled it and put it in an installer package to make it easier. Of course Install at your own risk, but it worked on my MacBook Pro i7 and MacBook Air Core 2 Duo both running 10.6.8.

     

    You can download my installer from here.

    https://drive.google.com/file/d/0BxQCbeIgpA2uYzBOSktXM3F0VjA/view?usp=sharing

     

    1) install package

         It will install the following files and should: (version of ntp 4.2.8)

     

         /usr/bin/sntp

         /usr/bin/ntp-keygen

         /usr/bin/ntpq

         /usr/sbin/ntpdc

         /usr/sbin/ntpdate

         /usr/sbin/ntpd

     

    2) Reboot or Open the system preferences - Date & Time - uncheck Set date and time automatically (to stop the process) and check it again to start the ntpd again using the new binary,

  • by flatsixracer,

    flatsixracer flatsixracer Dec 24, 2014 7:34 PM in response to flatsixracer
    Level 1 (10 points)
    Dec 24, 2014 7:34 PM in response to flatsixracer

    Here is the correct link to the installer. (I can't update/edit the link on my previous post)

    https://drive.google.com/folderview?id=0BxQCbeIgpA2uVjFiN1h4bGZNQ2c&usp=sharing

  • by WZZZ,

    WZZZ WZZZ Dec 25, 2014 11:30 AM in response to flatsixracer
    Level 6 (13,112 points)
    Mac OS X
    Dec 25, 2014 11:30 AM in response to flatsixracer

    Another way of doing this (not as fast as running a dmg installer, but easier than entering all the commands:)

  • by seventy one,

    seventy one seventy one Dec 25, 2014 4:07 PM in response to WZZZ
    Level 6 (15,200 points)
    Peripherals
    Dec 25, 2014 4:07 PM in response to WZZZ

    I am seriously beginning not to trust Apple.    Failing to cover the security needs of a well regarded and popular OS is dreadful.    It is tantamount to forcing people to upgrade when it could involve them in considerable on-costs in terms of replacing existing PPC programs or upgrading HDs.    Big thank you, WZZZ, for drawing our attention to this matter.

  • by WZZZ,

    WZZZ WZZZ Dec 25, 2014 4:54 PM in response to seventy one
    Level 6 (13,112 points)
    Mac OS X
    Dec 25, 2014 4:54 PM in response to seventy one

    >>I am seriously beginning not to trust Apple.

    Beginning not to trust Apple? Seriously? In that case, it's time for you to reread Little Red Riding Hood. icon_rolleyes.gif

  • by pcbjr,

    pcbjr pcbjr Dec 25, 2014 5:03 PM in response to flatsixracer
    Level 2 (282 points)
    Mac OS X
    Dec 25, 2014 5:03 PM in response to flatsixracer

    Having run the installer - how do I check to make sure I'm now up to date?

  • by flatsixracer,

    flatsixracer flatsixracer Dec 25, 2014 5:22 PM in response to pcbjr
    Level 1 (10 points)
    Dec 25, 2014 5:22 PM in response to pcbjr

    The way I know, is to check the ntp version per command line. If it's not updated, the version will be version  4.2.4 (or something else than 4.2.8) on OS X 10.6.8

     

    1) open Terminal.app (located in the utilities folder)

    2) type the following or copy/paste and return: sudo ntpd --version

    3) enter your computer admin password and it should return the version as below.

     

    ntpd 4.2.8@1.3265-o Wed Dec 24 18:19:07 UTC 2014 (1)

     

    Note: You can check the version of the other binaries the same way: sudo ntpd --version , sudo ntp-keygen --version, etc.

    or check the file dates in /usr/bin and /use/sbin.

  • by pcbjr,

    pcbjr pcbjr Dec 25, 2014 5:23 PM in response to flatsixracer
    Level 2 (282 points)
    Mac OS X
    Dec 25, 2014 5:23 PM in response to flatsixracer

    !!!!!!!!!!!!!!!

    Thanks!!!!!!!!!!

  • by michael louey,

    michael louey michael louey Dec 26, 2014 2:38 AM in response to flatsixracer
    Level 1 (65 points)
    Dec 26, 2014 2:38 AM in response to flatsixracer

    Thanks for taking the time to produce an installer !  It worked a treat for me.

  • by peace36,

    peace36 peace36 Dec 26, 2014 4:01 AM in response to flatsixracer
    Level 1 (13 points)
    Mac OS X
    Dec 26, 2014 4:01 AM in response to flatsixracer

    Thank you very much for the executable package. At the same download address, and with your permission, I also dowloaded the ShellShock fix which I still hadn't applied to my macs. Both of them seem to have done the trick. We should stick together and try to provide among ourselves "unofficial" support to this wonderful OS. I'm not in the mood of "following" this new yearly OS X updates schedule neither buying a new equipment when the two I own develop an absolutely awesome peformance in every task I need. Programmed obsolescence? Of course, but not with me. Maybe next time it will be Fedora + non internet connection OS X Snow Leopard.

  • by flatsixracer,

    flatsixracer flatsixracer Dec 26, 2014 9:37 AM in response to peace36
    Level 1 (10 points)
    Dec 26, 2014 9:37 AM in response to peace36

    You are welcome and I'm glad it worked and that I could help. Personally, I will be using Snow Leopard for a long time.

  • by Allen Barnella,

    Allen Barnella Allen Barnella Dec 27, 2014 5:39 AM in response to flatsixracer
    Level 2 (155 points)
    Dec 27, 2014 5:39 AM in response to flatsixracer

    Thank you for taking the time and effort to help those still using Snow Leopard, it's appreciated.

  • by WZZZ,

    WZZZ WZZZ Dec 27, 2014 7:04 AM in response to WZZZ
    Level 6 (13,112 points)
    Mac OS X
    Dec 27, 2014 7:04 AM in response to WZZZ

    flatsixracer wrote: check ntpd version (should now be: ntpd 4.2.8@1.3265-o)

    On my 10.6, I got ntpd 4.2.8@1.3265, no -o. But on my old G3/10.4.11 I got the -o. Any idea what the -o stands for? Someone elsewhere was thinking it could refer to the processor optimization command used during compiling.

  • by WZZZ,

    WZZZ WZZZ Dec 27, 2014 7:14 AM in response to WZZZ
    Level 6 (13,112 points)
    Mac OS X
    Dec 27, 2014 7:14 AM in response to WZZZ

    Too late to edit. Just noticed that you wrote, "(should now be: ntpd 4.2.8@1.3265-o"

     

    Since you got that, it looks like it's normal for it to go either way.

Previous Page 2 of 12 last Next