262 matches found
Debian DSA-063-1 : xinetd - change default umask
zen-parse reported on bugtraq that there is a possible buffer overflow in the logging code from xinetd. This could be triggered by using a fake identd that returns special replies when xinetd does an ident request. Another problem is that xinetd sets it umask to 0. As a result any programs that...
CVE-2001-0825
Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execute arbitrary commands via a length argument of zero or less, which disables the length check...
CVE-2001-0825
The CVE-2001-0825 entry concerns xinetd prior to 2.1.8.8, where a buffer overflow in internal string handling routines enables remote command execution. The vulnerability stems from a length argument of zero or less, which disables the length check and may allow an attacker to run arbitrary comma...
CVE-2001-0825: Undefined Security Weakness
Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execute arbitrary commands via a length argument of zero or less, which disables the length check...
Mandrake Linux Security Advisory : xinetd (MDKSA-2003:056)
A vulnerability was discovered in xinetd where memory was allocated and never freed if a connection was refused for any reason. Because of this bug, an attacker could crash the xinetd server, making unavailable all of the services it controls. Other flaws were also discovered that could cause...
Mandrake Linux Security Advisory : xinetd (MDKSA-2001:055-1)
A bug exists in xinetd as shipped with Mandrake Linux 8.0 dealing with TCP connections with the WAIT state that prevents linuxconf-web from working properly. As well, xinetd contains a security flaw in which it defaults to a umask of 0. This means that applications using the xinetd umask that do...
Mandrake Linux Security Advisory : xinetd (MDKSA-2001:076)
An audit has been performed on the xinetd 2.3.0 source code by Solar Designer for many different possible vulnerabilities. The 2.3.1 release incorporated his patches into the xinetd source tree. The audit was very thorough and found and fixed many problems. This xinetd update includes his audit...
RHEL 2.1 : xinetd (RHSA-2003:161)
Updated xinetd packages fix a security vulnerability and other bugs. Xinetd is a master server that is used to to accept service connection requests and start the appropriate servers. Because of a programming error, memory was allocated and never freed if a connection was refused for any reason. ...
[CLA-2003:782] Conectiva Security Announcement - xinetd
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------------- PACKAGE : xinetd SUMMARY : Fixes for memory leaks and other...
Important: Red Hat Security Advisory: : : : Updated xinetd packages fix denial-of-service attacks and other bugs
Updated xinetd packages for Red Hat Linux on IBM iSeries and pSeries systems that fix a security vulnerability and two denial of service vulnerabilities are now avaliable. Xinetd is a 'master server' that is used to to accept service connection requests and start the appropriate servers. Versions...
Important: Red Hat Security Advisory: xinetd security update
Updated xinetd packages fix a security vulnerability and other bugs. Xinetd is a master server that is used to to accept service connection requests and start the appropriate servers. Because of a programming error, memory was allocated and never freed if a connection was refused for any reason. ...
Important: Red Hat Security Advisory: : Updated xinetd packages fix a denial-of-service attack and other bugs
Updated xinetd packages that fix a security vulnerability are now avaliable. Xinetd is a 'master server' that is used to to accept service connection requests and start the appropriate servers. Because of a programming error, memory was allocated and never freed if a connection was refused for an...
DEBIAN-CVE-2003-0211
Memory leak in xinetd 2.3.10 allows remote attackers to cause a denial of service memory consumption via a large number of rejected connections...
CVE-2003-0211
Memory leak in xinetd 2.3.10 allows remote attackers to cause a denial of service memory consumption via a large number of rejected connections...
Xinetd 2.3.10 Memory Leaks
BACKGROUND ----------- Xinetd is a popular inetd replacement. Shortly after the 2.3.9 release in September 2002, it was realized that xinetd was leaking file descriptors. That problem turned out to be that file descriptors were not always being closed whenever a connection was rejected. 2.3.10 wa...
Xinetd 2.1.x2.3.x - Rejected Connection Memory Leakage Denial of Service
Xinetd 2.1.x2.3.x - Rejected Connection Memory Leakage Denial of Service source: https://www.securityfocus.com/bid/7382/info A denial of service vulnerability has been reported for Xinetd. The vulnerability exists due to memory leaks occuring when connections are rejected. Numerous, repeated...
Xinetd 2.1.x/2.3.x - Rejected Connection Memory Leakage Denial of Service
source: https://www.securityfocus.com/bid/7382/info A denial of service vulnerability has been reported for Xinetd. The vulnerability exists due to memory leaks occuring when connections are rejected. Numerous, repeated connections to a vulnerable Xinetd server will result in the consumption of a...
CVE-2003-0211
CVE-2003-0211 (xinetd) is due to a memory leak in xinetd 2.3.10 where memory is allocated and not freed when a connection is refused, enabling remote attackers to cause denial of service through many rejected connections. Public advisories indicate the issue impacts multiple distributions and is ...
