Lucene search

[email protected]CVE-2000-0536

HistoryJun 04, 2000 - 4:00 a.m.

CVE-2000-0536

2000-06-0404:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2000-0536

xinetd

dns

nvd

access control

reverse dns entry

vulnerability

7.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

71.9%

JSON

xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host does not have a reverse DNS entry.

CPENameOperatorVersion
xinetd:xinetdxinetdeq2.1.88_pre2
xinetd:xinetdxinetdeq2.1.88_pre1
xinetd:xinetdxinetdeq2.1.89_pre3
xinetd:xinetdxinetdeq2.1.89_pre4
xinetd:xinetdxinetdeq2.1.89_pre2
xinetd:xinetdxinetdeq2.1.89_pre1
xinetd:xinetdxinetdeq2.1.89_pre5
xinetd:xinetdxinetdeq2.1.87
xinetd:xinetdxinetdeq2.1.88

CPE	Name	Operator	Version
xinetd:xinetd	xinetd	eq	2.1.88_pre2
xinetd:xinetd	xinetd	eq	2.1.88_pre1
xinetd:xinetd	xinetd	eq	2.1.89_pre3
xinetd:xinetd	xinetd	eq	2.1.89_pre4
xinetd:xinetd	xinetd	eq	2.1.89_pre2
xinetd:xinetd	xinetd	eq	2.1.89_pre1
xinetd:xinetd	xinetd	eq	2.1.89_pre5
xinetd:xinetd	xinetd	eq	2.1.87
xinetd:xinetd	xinetd	eq	2.1.88

References

www.debian.org/security/2000/20000619

www.securityfocus.com/bid/1381

www.synack.net/xinetd/

exchange.xforce.ibmcloud.com/vulnerabilities/4986

7.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

71.9%

JSON