CVE-2004-0657: HP TRU64 Unix

Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days.

Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time.

Affected products

• HP TRU64 Unix: version 4.0f only; version 4.0g only; version 5.1b only; version 51.1a only
• Ntp Ntp: before 4.0 (fixed in 4.0)

Published 2004-08-06. Last modified 2026-06-16.