CVE-2016-5117
OpenNTPD before 6.0p1 does not validate the CN for HTTPS constraint requests, which allows remote attackers to bypass the man-in-the-middle mitigations via a crafted timestamp c…
Published: 2017-01-31 · CVSS: Unscored
OpenNTPD before 6.0p1 does not validate the CN for HTTPS constraint requests, which allows remote attackers to bypass the man-in-the-middle mitigations via a crafted timestamp constraint with a valid certificate.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7