In case anyone else is working with machines that may still be running 10.7 for some time, here are patched ntp binaries in a DMG ready for deployment:
https://s3-us-west-2.amazonaws.com/74bit-public/apple-osx-lionntpd-update.dmg
and here it is on GitHub:
https://github.com/owen-74bit/osx-10.7-ntp
With the appropriate Xcode tools for your environment, you can backup, unload, compile and install, then reload the patched ntp components with the following commands:
#!/bin/bash
sudo launchctl unload /System/Library/LaunchDaemons/org.ntp.ntpd.plist
sudo cp /usr/sbin/ntpd /usr/sbin/ntpd.old
sudo cp /usr/sbin/ntpdate /usr/sbin/ntpdate.old
sudo cp /usr/sbin/ntpdc /usr/sbin/ntpdc.old
sudo cp /usr/sbin/ntptrace /usr/sbin/ntptrace.old
sudo cp /usr/bin/sntp /usr/bin/sntp.old
sudo cp /usr/bin/ntp-keygen /usr/bin/ntp-keygen.old
sudo cp /usr/bin/ntpq /usr/bin/ntpq.old
mkdir ntpd-fix
cd ntpd-fix
curl http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/ntp-4.2.8.tar.gz | tar zxf -
cd ntp-4.2.8/ntpd
curl http://bugs.ntp.org/attachment.cgi?id=1165 | patch -p1
cd ..
./configure --prefix='/usr' && make && sudo make install
sudo launchctl load /System/Library/LaunchDaemons/org.ntp.ntpd.plist
rm -r ~/ntpd-fix
No guarantees. Use sense if you choose to deploy.
All credit for compile commands go to klanomath: http://apple.stackexchange.com/questions/163446/how-to-install-the-2014-ntp-security-fix-on-10-6-8-snow-leopard
