Published: 04/06/2012 Updated: 29/08/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

builtins.c in Xinetd prior to 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled services and allows remote malicious users to bypass intended access restrictions via a request to tcpmux port 1.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xinetd xinetd 2.3.9
xinetd xinetd 2.3.8
xinetd xinetd 2.3.11
xinetd xinetd 2.3.10
xinetd xinetd 2.3.7
xinetd xinetd 2.3.6
xinetd xinetd 2.3.13
xinetd xinetd 2.3.12
xinetd xinetd 2.3.5
xinetd xinetd

Debian Bug report logs - #672381 CVE-2012-0862: enables unintentional services over tcpmux port Package: xinetd; Maintainer for xinetd is Salvo 'LtWorf' Tomaselli <tiposchi@tiscaliit>; Source for xinetd is src:xinetd (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <muehlenhoff@univentionde> Date: Thu, 10 May ...

Synopsis Low: xinetd security and bug fix update Type/Severity Security Advisory: Low Topic An updated xinetd package that fixes one security issue and two bugs is nowavailable for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having lowsecurity impact A Common Vuln ...

Synopsis Low: xinetd security and bug fix update Type/Severity Security Advisory: Low Topic An updated xinetd package that fixes one security issue and two bugs is nowavailable for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having lowsecurity impact A Common Vuln ...

CWE-20 https://bugzilla.redhat.com/show_bug.cgi?id=790940 https://bugzilla.redhat.com/attachment.cgi?id=583311 http://www.securityfocus.com/bid/53720 http://www.openwall.com/lists/oss-security/2012/05/10/2 http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081428.html http://www.osvdb.org/81774 http://www.xinetd.org/#changes http://www.securitytracker.com/id?1027050 http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081446.html http://www.openwall.com/lists/oss-security/2012/05/09/5 http://www.mandriva.com/security/advisories?name=MDVSA-2012:155 http://rhn.redhat.com/errata/RHSA-2013-1302.html https://exchange.xforce.ibmcloud.com/vulnerabilities/75965 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=672381 https://nvd.nist.gov

CVE-2012-0862

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect