Lucene search

K
cve[email protected]CVE-2013-4342
HistoryOct 10, 2013 - 12:55 a.m.

CVE-2013-4342

2013-10-1000:55:00
CWE-264
web.nvd.nist.gov
52
cve-2013-4342
xinetd
tcpmux
services
vulnerability
remote attackers
privileges

9.2 High

AI Score

Confidence

High

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.7%

xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service.

9.2 High

AI Score

Confidence

High

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.7%