CVE-2012-0862

builtins.c in Xinetd before 2.3.15 does not check the service type when the
tcpmux-server service is enabled, which exposes all enabled services and
allows remote attackers to bypass intended access restrictions via a
request to tcpmux port 1.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=672381&gt;
• <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0862&gt;
• <https://bugs.launchpad.net/bugs/1016505&gt;