January 2021
Intermediate to advanced
547 pages
12h 4m
Chinese
Content preview from 网络安全评估（第三版）
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
218
｜
第
7
章
表
7
-
14
：NTP 漏洞
CVE
编号
影响软件
注释
CVE-2016-1384 Cisco IOS 15.5 and others
远程攻击者可以通过精心制作的数据包
来修改系统时间
CVE-2015-7871 NTP 4.2.5p186 to 4.2.8p3 Crypto-NAK
绕过导致未经身份验证的对
等方设置时间
a
CVE-2015-7855 to NTP 4.2.8p3
多次溢出和内存损坏漏洞会导致意想不
CVE-2015-7848 Cisco products
到的后果
CVE-2014-9750 NTP 4.2.8
进程内存信息泄露
CVE-2014-9295 NTP 4.2.7
多个缓冲区溢出漏洞
CVE-2014-3309 Cisco IOS NTP
拒绝所有
ACL
绕过
CVE-2013-5211 NTP 4.2.7p25
流量方法缺陷导致分布式拒绝服务
CVE-2009-1252 NTP 4.2.4p6 and 4.2.5p152
多个栈缓冲区溢出
CVE-2009-0159
CVE-2009-0021 NTP 4.2.4p5 and 4.2.5p151 NTP
时间欺骗缺陷
a. Metasploit
ntp_nak_to_the_future
module.
SNMP
简单网络管理协议服务通常出于监控目的运行在管理型交换机、路由器和服
务器操作系统（如
Microsoft Windows Server
和
Linux
）之上。
SNMP
服务的
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.