CVE-2013-4342

State: Published
Severity: Not scored
Published: Oct 10, 2013
Updated: Aug 6, 2024
Reserved: Jun 12, 2013

Description

xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

GLSA-201611-06vendor-advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1006100
https://github.com/xinetd-org/xinetd/pull/10
RHSA-2013:1409vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.