DEBIAN-CVE-2002-0871

xinetd 2.3.4 leaks file descriptors for the signal pipe to services that are launched by xinetd, which could allow those services to cause a denial of service via the pipe...

CVE-2001-1389

Concrete details from connected sources show that CVE-2001-1389 affects xinetd up to version 2.3.3, with remote code execution and denial-of-service possibilities caused by buffer overflows and improper NULL termination. The Mandrake advisory confirms patches were applied in the 2.3.1 release, in...

CVE-2001-1389

Multiple vulnerabilities in xinetd 2.3.0 and earlier, and additional variants until 2.3.3, may allow remote attackers to cause a denial of service or execute arbitrary code, primarily via buffer overflows or improper NULL termination...

pipe problems in xinetd

Child process can access pipe descriptior used for internal signal handling...

MDKSA-2002:053 - xinetd update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: xinetd Advisory ID: MDKSA-2002:053 Date: August 26th, 2002 Affected versions: 8.2 Problem Description: A vulnerability was discovered by Solar Designer in xinetd. File descriptors for the signal pi...

[SECURITY] [DSA 151-1] New xinetd packages fix local denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 151-1 [email protected] http://www.debian.org/security/ Martin Schulze August 13th, 2002 - -------------------------------------------------------------------------- Package : xinetd...

[SECURITY] [DSA 151-1] New xinetd packages fix local denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 151-1 [email protected] http://www.debian.org/security/ Martin Schulze August 13th, 2002 - -------------------------------------------------------------------------- Package : xinetd...

DSA-151 xinetd - pipe exposure

Bulletin has no description...

CVE-2001-1322

The CVE-2001-1322 issue concerns xinetd up to version 2.1.8 (and earlier) running with a default umask of 0, allowing local users to read or modify files created by processes started by xinetd that don’t set a safe umask. Public sources in the connected docs identify this as a local-privilege ris...

CVE-2001-1322

xinetd 2.1.8 and earlier runs with a default umask of 0, which could allow local users to read or modify files that are created by an application that runs under xinetd but does not set its own safe umask...

CVE-2001-0825

Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execute arbitrary commands via a length argument of zero or less, which disables the length check...

CVE-2001-0763

Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a long ident response, which is not properly handled by the svclogprint function...

Многочисленные ошибки в xinetd (multiple bugs)

Проведенный аудит кода выявил многочисленные ошибки...

xinetd 2.3.0 audit status

Hi, As some of you may know, I've performed an audit of the xinetd 2.3.0 source code for certain classes of vulnerabilities. The audit has resulted in a significant number of fixes many are for non-security issues. The patch was over 100 KB large and got incorporated into xinetd starting with...

CVE-2001-1389

Multiple vulnerabilities in xinetd 2.3.0 and earlier, and additional variants until 2.3.3, may allow remote attackers to cause a denial of service or execute arbitrary code, primarily via buffer overflows or improper NULL termination...

CVE-2001-1322

xinetd 2.1.8 and earlier runs with a default umask of 0, which could allow local users to read or modify files that are created by an application that runs under xinetd but does not set its own safe umask...

FreeBSD-SA-01:47.xinetd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:47 Security Advisory FreeBSD, Inc. Topic: xinetd contains multiple vulnerabilities Category: ports Module: xinetd Announced: 2001-07-10 Credits: [email protected] Affects...

Exploit for xinetd-2.1.8.9pre11-1

Hi bugtraq. I read the zen-parse's advisory about the 'potential' overflow, as he said, in xinetd-2.1.8.9pre11-1 and I tried to work around it. First of all we have to remember that the bof occurs only if, in the configuration file of the daemon, there is an entry like this: logonsuccess = HOST P...

Переполнение буфера в xinetd (buffer overflow)

При запросе к службе ident, если порт "короткий" например состоит из одной цифры можно переполнить буфер на несколько байт...

Xinetd 2.1.8 - Remote Buffer Overflow

Xinetd 2.1.8 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/2840/info The possibility for a buffer overflow condition exists in the xinetd daemon. Xinetd provides the ability to log via identd the user-identities of clients connecting to specific services if the clients hos...