CVE-2005-2496: Dave Mills Ntpd

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with different privileges than intended.

Affected products

• Dave Mills Ntpd: up to and including 4.2.0.a.2004-06-17_4.fc3

Published 2005-09-02. Last modified 2026-06-16.