248 matches found
Mandriva Update for xinetd MDVSA-2012:155-1 (xinetd)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Mandriva Update for xinetd MDVSA-2012:155-1 (xinetd)
Check for the Version of xinetd OpenVAS Vulnerability Test Mandriva Update for xinetd MDVSA-2012:155-1 xinetd Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
xinitd restrictions bypass
tcpmux invalid service type check...
CVE-2012-0862
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:155 http://www.mandriva.com/security/ Package : xinetd Date : September 28, 2012 Affected: Enterprise Server 5.0 Problem Description: A security issue was identified and fixed in xinetd: builtins.c in Xinetd...
Mandrake Linux Security Advisory : xinetd (MDKSA-2002:053)
A vulnerability was discovered by Solar Designer in xinetd. File descriptors for the signal pipe that were introduced in version 2.3.4 are leaked into services started by xinetd, which can then be used to talk to xinetd, resulting in a crash of xinetd. %NASLMINLEVEL 70300 C Tenable Network...
CVE-2012-0862
builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled services and allows remote attackers to bypass intended access restrictions via a request to tcpmux port 1...
DEBIAN-CVE-2012-0862
builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled services and allows remote attackers to bypass intended access restrictions via a request to tcpmux port 1...
CVE-2012-0862
builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled services and allows remote attackers to bypass intended access restrictions via a request to tcpmux port 1...
CVE-2012-0862
builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled services and allows remote attackers to bypass intended access restrictions via a request to tcpmux port 1...
Design/Logic Flaw
builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled services and allows remote attackers to bypass intended access restrictions via a request to tcpmux port 1...
CVE-2012-0862
CVE-2012-0862 affects xinetd prior to 2.3.15: when the tcpmux-server service is enabled, builtins.c does not verify the service type, causing all enabled services to be exposed and allowing remote attackers to bypass access restrictions via tcpmux port 1. Public advisories (e.g., MiracleLinux AXS...
CVE-2012-0862
builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled services and allows remote attackers to bypass intended access restrictions via a request to tcpmux port 1...
CVE-2012-0862
builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled services and allows remote attackers to bypass intended access restrictions via a request to tcpmux port 1...
Fedora Update for xinetd FEDORA-2012-8061
Check for the Version of xinetd OpenVAS Vulnerability Test Fedora Update for xinetd FEDORA-2012-8061 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for xinetd FEDORA-2012-8041
Check for the Version of xinetd OpenVAS Vulnerability Test Fedora Update for xinetd FEDORA-2012-8041 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for xinetd FEDORA-2012-8061
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for xinetd FEDORA-2012-8041
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Xinetd < 2.3.15 安全限制绕过漏洞
BUGTRAQ ID: 53720 CVE ID: CVE-2012-0862 Xinetd是一个来源于BSD inetd的安全替代产品,最初是由[email protected]开发的。 Xinetd在实现上存在安全限制绕过漏洞,在启用了tcpmux-server访问后,xinetd没有配置服务,而是利用tcpmux端口公开了所有启用的服务,攻击者可利用此漏洞绕过防火墙的安全限制,通过tcpmux端口访问服务。 0 Xinetd 2.3.15 厂商补丁: Xinetd ------ 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...
Fedora 16 : xinetd-2.3.14-47.fc16 (2012-8061)
Fix tcpmux security Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
Fedora 15 : xinetd-2.3.14-37.fc15 (2012-8041)
Fix tcpmux security Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...