4 matches found
CVE-2012-0862
builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled services and allows remote attackers to bypass intended access restrictions via a request to tcpmux port 1...
Design/Logic Flaw
builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled services and allows remote attackers to bypass intended access restrictions via a request to tcpmux port 1...
CVE-2012-0862
CVE-2012-0862 affects xinetd prior to 2.3.15: when the tcpmux-server service is enabled, builtins.c does not verify the service type, causing all enabled services to be exposed and allowing remote attackers to bypass access restrictions via tcpmux port 1. Public advisories (e.g., MiracleLinux AXS...
CVE-2012-0862
builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled services and allows remote attackers to bypass intended access restrictions via a request to tcpmux port 1...