Red Hat Security AdvisoryRHSA-2013:1409
xinetd security update
Released 2013-10-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) xinetd-2:2.3.14-20.el5_10, xinetd-2:2.3.14-20.el5_10.i386, xinetd-2:2.3.14-20.el5_10.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) xinetd-2:2.3.14-20.el5_10, xinetd-2:2.3.14-20.el5_10.i386
- Red Hat Enterprise Linux Desktop (v. 6) xinetd-2:2.3.14-39.el6_4
- Red Hat Enterprise Linux HPC Node (v. 6) xinetd-2:2.3.14-39.el6_4
- Red Hat Enterprise Linux Server (v. 6) xinetd-2:2.3.14-39.el6_4
- Red Hat Enterprise Linux Workstation (v. 6) xinetd-2:2.3.14-39.el6_4
Fixes 1 record
Priority MEDIUM 43
xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vul…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.06391 · Published 2013-10-10 · Fixed CWE-264
