NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to prigina timestamp validation via a packet with an origin timestamp set to zero.