Lucene search
HistoryOct 10, 2013 - 12:55 a.m.
CVE-2013-4342
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
9.5 High
AI Score
Confidence
High
0.01 Low
EPSS
Percentile
83.8%
xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service.
Affected configurations
Node
xinetdxinetdMatch-
Node
redhatenterprise_linuxMatch5
ORredhatenterprise_linuxMatch6.0
Related
nessus
nessus
FreeBSD : xinetd -- ignores user and group directives for TCPMUX services (5c34664f-2c2b-11e3-87c2-00215af774f0)
2013-10-04 00:00:00
Amazon Linux AMI : xinetd (ALAS-2013-232)
2013-10-24 00:00:00
Mandriva Linux Security Advisory : xinetd (MDVSA-2013:248)
2013-10-11 00:00:00
openvas
openvas
Fedora Update for xinetd FEDORA-2013-18243
2013-10-15 00:00:00
Oracle: Security Advisory (ELSA-2013-1409)
2015-10-06 00:00:00
Mageia: Security Advisory (MGASA-2013-0302)
2022-01-28 00:00:00
amazon
amazon
Medium: xinetd
2013-10-16 20:53:00
ubuntucve
ubuntucve
CVE-2013-4342
2013-10-10 00:00:00
debiancve
debiancve
CVE-2013-4342
2013-10-10 00:55:14
cvelist
cvelist
CVE-2013-4342
2013-10-10 00:00:00
freebsd
freebsd
xinetd -- ignores user and group directives for TCPMUX services
2005-08-23 00:00:00
oraclelinux
oraclelinux
xinetd security update
2013-10-07 00:00:00
securityvulns
securityvulns
[ MDVSA-2013:248 ] xinetd
2013-10-12 00:00:00
xinetd privilege escalation
2013-10-12 00:00:00
cbl_mariner
cbl_mariner
CVE-2013-4342 affecting package xinetd for versions less than 2.3.15-14
2023-04-16 01:05:11
CVE-2013-4342 affecting package xinetd for versions less than 2.3.15-14
2024-03-19 17:21:46
CVE-2013-4342 affecting package xinetd 2.3.15-12
2023-04-20 19:17:28
mageia
mageia
Updated xinetd package fixes security vulnerability
2013-10-10 02:47:09
redhat
redhat
(RHSA-2013:1409) Moderate: xinetd security update
2013-10-07 00:00:00
gentoo
gentoo
xinetd: Privilege escalation
2016-11-15 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: xinetd-2.3.15-8.fc19
2013-10-11 23:56:28
[SECURITY] Fedora 20 Update: xinetd-2.3.15-8.fc20
2013-10-12 04:28:04
prion
prion
Default configuration
2013-10-10 00:55:00
cve
cve
CVE-2013-4342
2013-10-10 00:55:14
centos
centos
xinetd security update
2013-10-07 21:45:03
veracode
veracode
Privilege Escalation
2019-01-15 09:00:25
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0449
2023-08-10 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0629
2023-08-08 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0060
2023-07-29 00:00:00
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
9.5 High
AI Score
Confidence
High
0.01 Low
EPSS
Percentile
83.8%
Related for NVD:CVE-2013-4342