Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-0862
HistoryJun 04, 2012 - 12:00 a.m.

CVE-2012-0862

2012-06-0400:00:00
ubuntu.com
ubuntu.com
7

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.005

Percentile

75.4%

builtins.c in Xinetd before 2.3.15 does not check the service type when the
tcpmux-server service is enabled, which exposes all enabled services and
allows remote attackers to bypass intended access restrictions via a
request to tcpmux port 1.

Bugs

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.005

Percentile

75.4%