CVEvulnerability
CVE-2013-4342
7.6 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-10-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service.
Affected configurations
• xinetd xinetd
• redhat enterprise linux 5
• redhat enterprise linux 6.0
Related
Weakness · not in database (1)
References
- http://rhn.redhat.com/errata/RHSA-2013-1409.html rhn.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1006100 Exploit, Patch
- https://github.com/xinetd-org/xinetd/pull/10 github.com
- https://security.gentoo.org/glsa/201611-06 security.gentoo.org
- http://rhn.redhat.com/errata/RHSA-2013-1409.html rhn.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1006100 Exploit, Patch
- https://github.com/xinetd-org/xinetd/pull/10 github.com
- https://security.gentoo.org/glsa/201611-06 security.gentoo.org