{"uuid": "577acd86-fce2-4a7f-a941-bbcfaa2bc3a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-5211", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ntp/ntp_reslist_dos.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Jon Hart \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module identifies NTP servers which permit \\\"reslist\\\" queries and\\n        obtains the list of restrictions placed on various network interfaces,\\n        networks or hosts. The reslist feature allows remote\\n        attackers to cause a distributed, reflected denial of service (aka, \\\"DRDoS\\\" or\\n        traffic amplification) via spoofed requests. The more interfaces, networks\\n        or hosts with specific restrictions, the greater the amplification.\\n        requests.\", \"disclosure_date\": \"2014-08-25\", \"fullname\": \"auxiliary/scanner/ntp/ntp_reslist_dos\", \"is_install_path\": true, \"mod_time\": \"2026-06-17 11:11:50 +0000\", \"name\": \"NTP Mode 7 GET_RESTRICT DRDoS Scanner\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/ntp/ntp_reslist_dos.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/ntp/ntp_reslist_dos\", \"references\": [\"CVE-2013-5211\", \"URL-https://github.com/rapid7/metasploit-framework/pull/3696\", \"URL-https://www.rapid7.com/blog/post/2014/08/25/r7-2014-12-more-amplification-vulnerabilities-in-ntp-allow-even-more-drdos-attacks/\"], \"rport\": 123, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:02.818197Z"}