3 ms·
ntpd is usually run as a daemon, which is run as root, and if you can overflow a buffer somewhere, given you know the architecture and platform (arm, raspberry
by zanny 13y ago
ntpd is usually run as a daemon, which is run as root, and if you can overflow a buffer somewhere, given you know the architecture and platform (arm, raspberry pi), and don't have data execution prevention, you can inject assembly instructions and jump a function pointer like any other stack overflow.
Then you have arbitrary code execution as ntpd. Unless you have apparmor, or some other MAC.
- desas 13y agontpd is usually ran as the ntp on debian based systems at least. Most rpi distros are debian based. Given that the same ntpd code is running on many many internet connected computers around the world, I don't think a microwave is worth a 0day remote root exploit on.