OConnorStP

Q: NTP vulnerability on versions prior to 4.2.8 -- we OK?

Just saw this post about an unpatched vulnerability in NTP and wasn't sure what version a Mavericks server would be running.  Here's the link:

 

    http://www.zdnet.com/article/major-ntp-security-holes-appears-and-are-being-expl oited/

 

There are lots of resource links within the post, but I got stuck on the basics -- trying to figure out what version of NTP is running on my server.  Can anybody point me in the right direction?  From what I can gather, the version of NTP on an Apple server may be different than the vulnerable one, but it's hard to tell.

Posted on Dec 20, 2014 4:46 PM

Close

Q: NTP vulnerability on versions prior to 4.2.8 -- we OK?

  • All replies
  • Helpful answers

first Previous Page 3 of 3
  • by cpragman,

    cpragman cpragman Dec 26, 2014 11:46 AM in response to ApplePoet
    Level 2 (464 points)
    Servers Enterprise
    Dec 26, 2014 11:46 AM in response to ApplePoet

    Essentials ought to be enough. You are just installing Xcode to get the command line tools and compiler.

  • by ApplePoet,

    ApplePoet ApplePoet Dec 26, 2014 12:44 PM in response to cpragman
    Level 1 (0 points)
    Dec 26, 2014 12:44 PM in response to cpragman

    What about the UNIX Dev Support.option?
    It has Command-line tools used for UNIX-based development.

     

    Are those the Command-line tools I need?

  • by One Wonders,

    One Wonders One Wonders Jan 3, 2015 3:55 AM in response to JohnDCCIU
    Level 2 (225 points)
    Jan 3, 2015 3:55 AM in response to JohnDCCIU

    John  in the Terminal with "ps ax | grep ntp".     What does the vertical bar separator  between ps ax and grep ntp  stand for? How is it uesd?

    Thanks sorry not very savy about terminal.

    Paul

  • by cpragman,

    cpragman cpragman Jan 3, 2015 3:01 PM in response to One Wonders
    Level 2 (464 points)
    Servers Enterprise
    Jan 3, 2015 3:01 PM in response to One Wonders

    The vertical bar "|" is the unix "pipe" operator.  It takes the output of whatever is on the left side, and pipes it into the command that is on the right side.

     

    In the example above ("ps ax | grep ntp"), the command ps is run.  The results of the ps command are dumped to STDOUT (normally the screen).  By using the pipe operator, the results are piped to the second command (grep) which takes them as input, and searches for the keyword "ntp".

first Previous Page 3 of 3