Following a new security vulnerability in the Network Time Protocol software package, Apple has provided a software update for Mountain Lion and newer versions of OS X.
Active4 years, 7 months ago
C Ntp Mac Os X, Network Time Protocol, Ntp, Ntp C, Ntp C++, Ntp Client C++. Download and delete files from a remote server, website or network for free. Ntp server free download - PS3 Media Server, Server Tools, MySQL Database Server, and many more programs. Apple Mac OS X Snow Leopard. Upgrade your Mac to Mac OS X Snow Leopard. Ntp free download - NTP Clock Sync, Apple OS X NTP Security Update Yosemite, Apple OS X NTP Security Update Mavericks, and many more programs. Best Video Software for the Mac How To Run MacOS.
As usual, the older versions of OS X that one may be stuck with (because the hardware does not support newer versions, because one needs Rosetta, …) are not covered by the security update.
My questions are:
![]()
In doubt I might use these instructions to limit the scope of ntpd without completely disabling/deleting it, but in this case there remains the risk of getting it wrong and leaving ntpd exposed.
Pascal Cuoq
Pascal CuoqPascal Cuoq
3 Answers
is disabling “set date and time automatically” in Software Preferences enough to ensure that ntpd is not running?
Yes.
Here is the way to insure yourself of this.Open a
Terminal or xterm window. Limewire free download for mac os x 10.4.11 download.
Run the following command:
and notice that you have an
ntpd process running.
Open
System Preferences andturn off Set date and time automatically:
Check with the Don't remove the ps command above that you don't have any ntpd process running.
ntpd binary, this is not necessary and would deprive you of the chance to take advantage of a fix from Apple :).
In doubt I might use these instructions to limit the scope
No.
This receipe will leave you with a running dandan
ntpd and hence exposed to an attack.
Adobe Flash Player Free Download For Mac Os X
8,78222 gold badges3434 silver badges105105 bronze badges
Instead of disabling ntpd, you should download the source for version 4.2.8 of ntp and compile it yourself. All you need is Xcode for Lion/SnowLeo. It should work on 10.6.x and 10.7.x just fine.
I have updated my 10.10 install immediately after the CVE was made public and source code released and I didn't wait on Apple to release the update.
To compile ntpd, download the source from ntp.org and apply the patch for OS X/FreeBSD. After applying this patch, you will be able to just run './configure && make.' Then you can copy the binaries to appropriate directories (/usr/sbin/ and /usr/bin/).
For Mac OS X 10.7 (Lion):
Here's the list of files and folders to which they belong to that will be built from the source above. After compilation, all these files will be in various sub-folders.
Rename old ones using something like:
and then move the new one in. Make sure to chown the files after moving them in place:
Note: I did not use klanomath
sudo make install because I didn't trust the Makefile (I wasn’t sure it would place files in the same folders that Apple has originally placed them in and wanted to be sure they're still in the same spot as old ones). Manually moving 6 files is not a big issue. Rest of the files (man pages, html pages, etc are the same so you don't have to bother moving those.)
51.1k77 gold badges7676 silver badges144144 bronze badges
MelBMelB
So would someone explain how this threat is actually put into play, assuming that the person doesn't specify pool.ntp.org as his ntp server?
Ways around this:
You can also use Fink or Homebrew this way, but MacPorts seems to be less dependent on Apple OS, so in the long run for an older system I suspect there will be less pain.
1,29822 gold badges1111 silver badges2828 bronze badges
![]() You must log in to answer this question.Java Download For Mac Osprotected by Community♦Dec 24 '14 at 13:57
Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).
Would you like to answer one of these unanswered questions instead? Not the answer you're looking for? Browse other questions tagged macoslionsnow-leopardsecurityntp .
Related:Time Server Ntp - Ntp Time For Server - Ntp Time Server Xp Vista - Ntp Time Server Freedownload - Xp Time Ntp
Pages : 1 | 2 | 3>
Comments are closed.
|
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |