ntp is vulnerable to arbitrary file write. Remote attackers with knowledge of remote configuration password and an IP address permitted to send configuration requests are able to write arbitrary files via the :config
command.
rhn.redhat.com/errata/RHSA-2016-0780.html
rhn.redhat.com/errata/RHSA-2016-2583.html
support.ntp.org/bin/view/Main/NtpBug2902
www.debian.org/security/2015/dsa-3388
www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
www.securityfocus.com/bid/77278
www.securitytracker.com/id/1033951
access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.8_Release_Notes/index.html
access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.8_Technical_Notes/index.html
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=1254547
bugzilla.redhat.com/show_bug.cgi?id=1286969
rhn.redhat.com/errata/RHSA-2016-0780.html
security.gentoo.org/glsa/201607-15
security.netapp.com/advisory/ntap-20171004-0001/