Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-4342HistoryOct 10, 2013 - 12:55 a.m.
CVE-2013-4342
2013-10-1000:55:00
Debian Security Bug Tracker
security-tracker.debian.org
12
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.01 Low
EPSS
Percentile
83.7%
xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | xinetd | < 1:2.3.15-2 | xinetd_1:2.3.15-2_all.deb |
| Debian | 11 | all | xinetd | < 1:2.3.15-2 | xinetd_1:2.3.15-2_all.deb |
| Debian | 10 | all | xinetd | < 1:2.3.15-2 | xinetd_1:2.3.15-2_all.deb |
| Debian | 999 | all | xinetd | < 1:2.3.15-2 | xinetd_1:2.3.15-2_all.deb |
| Debian | 13 | all | xinetd | < 1:2.3.15-2 | xinetd_1:2.3.15-2_all.deb |
Related
nessus
nessus
Amazon Linux AMI : xinetd (ALAS-2013-232)
2013-10-24 00:00:00
FreeBSD : xinetd -- ignores user and group directives for TCPMUX services (5c34664f-2c2b-11e3-87c2-00215af774f0)
2013-10-04 00:00:00
Fedora 19 : xinetd-2.3.15-8.fc19 (2013-18243)
2013-10-13 00:00:00
securityvulns
securityvulns
[ MDVSA-2013:248 ] xinetd
2013-10-12 00:00:00
xinetd privilege escalation
2013-10-12 00:00:00
oraclelinux
oraclelinux
xinetd security update
2013-10-07 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2013-1409)
2015-10-06 00:00:00
Fedora Update for xinetd FEDORA-2013-18243
2013-10-15 00:00:00
Fedora Update for xinetd FEDORA-2013-18243
2013-10-15 00:00:00
freebsd
freebsd
xinetd -- ignores user and group directives for TCPMUX services
2005-08-23 00:00:00
cbl_mariner
cbl_mariner
CVE-2013-4342 affecting package xinetd for versions less than 2.3.15-14
2023-04-16 01:05:11
CVE-2013-4342 affecting package xinetd 2.3.15-12
2023-04-20 19:17:28
CVE-2013-4342 affecting package xinetd for versions less than 2.3.15-14
2024-03-19 17:21:46
ubuntucve
ubuntucve
CVE-2013-4342
2013-10-10 00:00:00
amazon
amazon
Medium: xinetd
2013-10-16 20:53:00
veracode
veracode
Privilege Escalation
2019-01-15 09:00:25
centos
centos
xinetd security update
2013-10-07 21:45:03
cve
cve
CVE-2013-4342
2013-10-10 00:55:00
prion
prion
Default configuration
2013-10-10 00:55:00
fedora
fedora
[SECURITY] Fedora 20 Update: xinetd-2.3.15-8.fc20
2013-10-12 04:28:04
[SECURITY] Fedora 19 Update: xinetd-2.3.15-8.fc19
2013-10-11 23:56:28
gentoo
gentoo
xinetd: Privilege escalation
2016-11-15 00:00:00
redhat
redhat
(RHSA-2013:1409) Moderate: xinetd security update
2013-10-07 00:00:00
mageia
mageia
Updated xinetd package fixes security vulnerability
2013-10-10 02:47:09
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0449
2023-08-10 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0629
2023-08-08 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0060
2023-07-29 00:00:00
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.01 Low
EPSS
Percentile
83.7%
Related for DEBIANCVE:CVE-2013-4342