PT-2001-1033 · Xinetd · Xinetd

Published 2001-07-03 · Updated 2018-05-03 · CVE-2001-0825

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions xinetd versions prior to 2.1.8.8

Description The issue is related to a buffer overflow in internal string handling routines, allowing remote attackers to execute arbitrary commands. This can be achieved by providing a length argument of zero or less, which disables the length check. The vulnerability can lead to disruption of confidentiality, integrity, and availability of protected information and can be exploited remotely.

Recommendations For versions prior to 2.1.8.8, update to version 2.1.8.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the xinetd service to minimize the risk of exploitation.

Fix

Related Identifiers

BDU:2015-07921

CVE-2001-0825

Affected Products

Xinetd

References · 8

• http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-029-01 · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000406 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2001-092.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0825 · Security Note
• https://bdu.fstec.ru/vul/2015-07921 · Security Note
• http://securityfocus.com/bid/2971 · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2001-092.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6804 · Note