Several remote vulnerabilities have been discovered in NTP, the Network Time Protocol reference implementation. The Common Vulnerabilities and Exposures project identifies the following problems:
A buffer overflow in ntpq allow a remote NTP server to create a denial of service attack or to execute arbitrary code via a crafted response.
A buffer overflow in ntpd allows a remote attacker to create a denial of service attack or to execute arbitrary code when the autokey functionality is enabled.
For the old stable distribution (etch), these problems have been fixed in version 4.2.2.p4+dfsg-2etch3.
For the stable distribution (lenny), these problems have been fixed in version 4.2.4p4+dfsg-8lenny2.
The unstable distribution (sid) will be fixed soon.
We recommend that you upgrade your ntp package.
MD5 checksums of the listed files are available in the original advisory.