PT-2001-1033 · Xinetd · Xinetd

Publicado 2001-07-03 · Atualizado 2018-05-03 · CVE-2001-0825

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions xinetd versions prior to 2.1.8.8

Description The issue is related to a buffer overflow in internal string handling routines, allowing remote attackers to execute arbitrary commands. This can be achieved by providing a length argument of zero or less, which disables the length check. The vulnerability can lead to disruption of confidentiality, integrity, and availability of protected information and can be exploited remotely.

Recommendations For versions prior to 2.1.8.8, update to version 2.1.8.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the xinetd service to minimize the risk of exploitation.

Correção

Identificadores relacionados

BDU:2015-07921

CVE-2001-0825

Produtos afetados

Xinetd

Referências · 8

• https://rhn.redhat.com/errata/RHSA-2001-092.html · Nota
• http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-029-01 · Aviso do Fabricante
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000406 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2001-092.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6804 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0825 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-07921 · Nota de Segurança
• http://securityfocus.com/bid/2971 · Aviso do Fabricante