CVE

Id
64289  
CVE No.
CVE-2013-4342  
Status
Candidate  
Description
xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
634121 64289 CVE-2013-4342 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1006100  View
634122 64289 CVE-2013-4342 CONFIRM:https://github.com/xinetd-org/xinetd/pull/10  View
634123 64289 CVE-2013-4342 REDHAT:RHSA-2013:1409  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24918 JVNDB-2013-006493 SimpleGeo python-oauth2 の複数の関数における nonce を推測される脆弱性 SimpleGeo python-oauth2 の (1) make_nonce、(2) generate_nonce、および (3) generate_verifier 関数は、nonce の生成に脆弱な乱数を使用するため、nonce を推測される脆弱性が存在します。 CVE-2013-4347 64289 5.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006493.html  View