Security issues with NTPD

I want to sync some two dozen Linux servers which are spread all over the world. I was thinking about using NTPD, but I want to know the security implications of using it: Is there a possible vulnerability? Should I sync them to a local server and sync it manually?

Thanks,

Udi

any piece of network software is a potential vulnerability, especially if it runs as root as ntpd does. That said, ntpd has a very good security record, so I would have little problem running it, as long as my servers were not listening as ntp servers, merely connecting to them to update the time.

Check more discussion of this question.

Related posts:

1. Problem synchronizing server time with ntpd
2. Do I need to run ntpd in my EC2 instance?
3. How do i smoothly update ntpd’s peer list?
4. ntpd Stratum Zero when nptd is started
5. NTPD on RedHat ES4 not synching to Win2K3 domain controler