CVE-2009-1252

CVE-2009-1252 describes a stack-based buffer overflow in the crypto_recv function of ntpd in NTP versions before 4.2.4p7 and 4.2.5 before 4.2.5p74. This vulnerability affects systems with OpenSSL and autokey enabled, allowing remote attackers to execute arbitrary code through a crafted packet containing an extension field. The vulnerability has a CVSS score of 6.8, indicating a medium severity. It can be exploited remotely with medium attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. Despite its age, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The vulnerability has garnered minimal community discussion and media coverage.