Amazon Linux: Security Advisory (ALAS-2013-232)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES10 / SLES11 Security Update : xinetd (SUSE-SU-2014:0871-1)

Xinetd receives a LTSS roll-up update to fix two security issues. - CVE-2012-0862: xinetd enabled all services when tcp multiplexing is used. - CVE-2013-4342: xinetd ignored user and group directives for tcpmux services, running services as root. While both issues are not so problematic on their...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xinetd-2.3.14 package of the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xinetd-2.3.14 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the Red Hat Linux operating system, which allows a malicious individual to compromise the accessibility of protected information

The vulnerability of the xinetd-2.3.7 package of the Red Hat Linux operating system can lead to a violation of the accessibility of protected information. Exploiting this vulnerability can be carried out locally...

Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the accessibility of protected information

The xinetd-2.3.11 package of the Red Hat Linux operating system has multiple vulnerabilities that, if exploited, may lead to a violation of the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...

The vulnerability of the Red Hat Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xinetd-2.3.0 package of the Red Hat Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The xinetd-2.1.8.9pre15 package of the Red Hat Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the Red Hat Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xinetd-2.3.3 package of the Red Hat Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xinetd-debuginfo-2.3.14 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...

Vulnerabilities of the Debian GNU/Linux operating system that allow a local malicious individual to compromise the accessibility of protected information

Multiple vulnerabilities exist in the xinetd package of the Debian GNU/Linux operating system. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xinetd-debuginfo-2.3.14 package for the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...

CVS Entry Line Flag Remote Heap Overflow - Ver2 (CVE-2004-0396)

Concurrent Versions System CVS is an open-source network-transparent version control system. CVS itself does not listen for, or accept network connections. To implement remote repository access, it can be installed as an inetd service, or invoked with the rsh/ssh command. Data between the server...

CentOS 5 : xinetd (CESA-2013:1302)

An updated xinetd package that fixes one security issue and two bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Xinetd 2.1.x/2.3.x Rejected Connection Memory Leakage Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7382/info A denial of service vulnerability has been reported for Xinetd. The vulnerability exists due to memory leaks occuring when connections are rejected. Numerous, repeated connections to a vulnerable Xinetd server...

Xinetd 2.1.8 - Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2840/info The possibility for a buffer overflow condition exists in the xinetd daemon. Xinetd provides the ability to log via identd the user-identities of clients connecting to specific services if the clients host...

YASAT - Yet Another Stupid Audit Tool

YASAT Yet Another Stupid Audit Tool is a simple stupid audit tool. Its goal is to be as simple as possible with minimum binary dependencies only sed, grep and cut Second goal is to document each test with maximum information and links to official documentation. It do many tests for checking...

openSUSE Security Update : xinetd (openSUSE-SU-2014:0517-1)

xinetd was updated to receive security fixes and a bug fix. Security issues fixed : - CVE-2013-4342 bnc844230 - xinetd ignored user and group directives for tcpmux services - CVE-2012-0862 bnc762294 - xinetd enabled all services when tcp multiplexing is used Also added support for setting maximum...

SuSE 11.3 Security Update : xinetd (SAT Patch Number 9021)

The multiplexing system xinetd was updated to fix security issues and a bug. Security issues fixed : - xinetd ignores user and group directives for tcpmux services. CVE-2013-4342 - xinetd enables all services when tcp multiplexing is used. Bug fixed:. CVE-2012-0862 - Services started by xinetd we...

Amazon Linux AMI : xinetd (ALAS-2013-232)

It was found that xinetd ignored the user and group configuration directives for services running under the tcpmux-server service. This flaw could cause the associated services to run as root. If there was a flaw in such a service, a remote attacker could use it to execute arbitrary code with the...