ntp -- stack-based buffer overflow

US-CERT reports:

ntpd contains a stack buffer overflow which may allow a remote unauthenticated attacker to execute arbitrary code on a vulnerable system or create a denial of service.

[source]