[CLA-2003:782] Conectiva Security Announcement - xinetd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------------- PACKAGE : xinetd SUMMARY : Fixes for memory leaks and other...

Important: Red Hat Security Advisory: : : : Updated xinetd packages fix denial-of-service attacks and other bugs

Updated xinetd packages for Red Hat Linux on IBM iSeries and pSeries systems that fix a security vulnerability and two denial of service vulnerabilities are now avaliable. Xinetd is a 'master server' that is used to to accept service connection requests and start the appropriate servers. Versions...

Important: Red Hat Security Advisory: xinetd security update

Updated xinetd packages fix a security vulnerability and other bugs. Xinetd is a master server that is used to to accept service connection requests and start the appropriate servers. Because of a programming error, memory was allocated and never freed if a connection was refused for any reason. ...

Important: Red Hat Security Advisory: : Updated xinetd packages fix a denial-of-service attack and other bugs

Updated xinetd packages that fix a security vulnerability are now avaliable. Xinetd is a 'master server' that is used to to accept service connection requests and start the appropriate servers. Because of a programming error, memory was allocated and never freed if a connection was refused for an...

DEBIAN-CVE-2003-0211

Memory leak in xinetd 2.3.10 allows remote attackers to cause a denial of service memory consumption via a large number of rejected connections...

CVE-2003-0211

Memory leak in xinetd 2.3.10 allows remote attackers to cause a denial of service memory consumption via a large number of rejected connections...

Xinetd 2.3.10 Memory Leaks

BACKGROUND ----------- Xinetd is a popular inetd replacement. Shortly after the 2.3.9 release in September 2002, it was realized that xinetd was leaking file descriptors. That problem turned out to be that file descriptors were not always being closed whenever a connection was rejected. 2.3.10 wa...

Xinetd 2.1.x2.3.x - Rejected Connection Memory Leakage Denial of Service

Xinetd 2.1.x2.3.x - Rejected Connection Memory Leakage Denial of Service source: https://www.securityfocus.com/bid/7382/info A denial of service vulnerability has been reported for Xinetd. The vulnerability exists due to memory leaks occuring when connections are rejected. Numerous, repeated...

Xinetd 2.1.x/2.3.x - Rejected Connection Memory Leakage Denial of Service

source: https://www.securityfocus.com/bid/7382/info A denial of service vulnerability has been reported for Xinetd. The vulnerability exists due to memory leaks occuring when connections are rejected. Numerous, repeated connections to a vulnerable Xinetd server will result in the consumption of a...

CVE-2003-0211

CVE-2003-0211 (xinetd) is due to a memory leak in xinetd 2.3.10 where memory is allocated and not freed when a connection is refused, enabling remote attackers to cause denial of service through many rejected connections. Public advisories indicate the issue impacts multiple distributions and is ...

CVE-2003-0211

Memory leak in xinetd 2.3.10 allows remote attackers to cause a denial of service memory consumption via a large number of rejected connections...

CVE-2003-0211

Memory leak in xinetd 2.3.10 allows remote attackers to cause a denial of service memory consumption via a large number of rejected connections...

CVE-2002-0871

xinetd 2.3.4 leaks file descriptors for the signal pipe to services that are launched by xinetd, which could allow those services to cause a denial of service via the pipe...

CVE-2001-0763

Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a long ident response, which is not properly handled by the svclogprint function...

CVE-2002-0871

xinetd 2.3.4 leaks file descriptors for the signal pipe to services that are launched by xinetd, which could allow those services to cause a denial of service via the pipe...

CVE-2002-0871

CVE-2002-0871 concerns xinetd 2.3.4, which leaks file descriptors for the signal pipe into services started by xinetd, enabling a potential DoS via the pipe. Public incident details across multiple vendors confirm this flaw and provide remediation paths: Debian’s DSA-151-1/woody fix to 2.3.4-1.2 ...

CVE-2001-0763

CVE-2001-0763 affects Linux xinetd up to version 2.1.8.9pre11-1 and earlier. The issue is a buffer overflow in the ident handling path: a long ident response is not properly processed by the svc_logprint function, enabling a remote attacker to potentially execute arbitrary code. Debian’s DSA-063-...

Moderate: Red Hat Security Advisory: : Updated xinetd packages fix denial of service vulnerability

Xinetd contains a denial-of-service DoS vulnerability. UPDATE 2002-12-02: Updated packages are available to fix issues encountered with the previous errata packages. Xinetd is a secure replacement for inetd, the Internet services daemon. Versions of Xinetd prior to 2.3.7 leak file descriptors for...

CVE-2002-0871

xinetd 2.3.4 leaks file descriptors for the signal pipe to services that are launched by xinetd, which could allow those services to cause a denial of service via the pipe...

CVE-2002-0871

xinetd 2.3.4 leaks file descriptors for the signal pipe to services that are launched by xinetd, which could allow those services to cause a denial of service via the pipe...