CVE-2001-0414: Dave Mills Ntpd

High severity, CVSS 10.0. EPSS: 91.9% chance of exploitation in the next 30 days.

Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.

Affected products

• Dave Mills Ntpd: up to and including 4.0.99k; version 4.0.99 only; version 4.0.99a only; version 4.0.99b only; version 4.0.99c only; version 4.0.99d only; …
• Dave Mills XNTP3: version 5.93 only; version 5.93a only; version 5.93b only; version 5.93c only; version 5.93d only; version 5.93e only

Published 2001-06-18. Last modified 2026-06-16.