NVD

Id
39961  
Name
CVE-2013-4342  
Description
xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-10-09  
Modified Date
2013-10-10  
Seq
2013-4342  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203308 39961 CVE-2013-4342 RHSA-2013:1409  View
203309 39961 CVE-2013-4342 https://bugzilla.redhat.com/show_bug.cgi?id=1006100  View
203310 39961 CVE-2013-4342 https://github.com/xinetd-org/xinetd/pull/10  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23009 JVNDB-2013-004584 xinetd における権限を取得される脆弱性 xinetd は、TCPMUX サービスのユーザおよびグループ設定のディレクティブを適用しないため、これらのサービスがルートとして実行される原因となり、権限を取得される脆弱性が存在します。 CVE-2013-4342 64284 CVE-2013-4342 39961 7.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004584.html 2013-10-02 2013-10-11 View