Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2013-4342

Опубликовано: 10 окт. 2013
Источник: nvd
CVSS2: 7.6
EPSS Низкий

Описание

xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:xinetd:xinetd:-:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 93%
0.06391
Низкий

7.6 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

ubuntu
почти 13 лет назад

xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service.

redhat
почти 21 год назад

xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service.

msrc
больше 3 лет назад

xinetd does not enforce the user and group configuration directives for TCPMUX services which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service.

debian
почти 13 лет назад

xinetd does not enforce the user and group configuration directives fo ...

github
около 4 лет назад

xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service.

EPSS

Процентиль: 93%
0.06391
Низкий

7.6 High

CVSS2

Дефекты

CWE-264