PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2013-4342

CVE-2013-4342

xinetd: ignores user and group directives for tcpmux services

Loading…

Severity

Moderate

Red Hat Product Security

7.6

CVSS 2.0

Review impact separately from score.

Published · August 23, 2005

Updated · June 27, 2026

Description

xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 2.0 · 7.6
AV:N/AC:H/Au:N/C:C/I:C/A:C

CWE-266 · Incorrect Privilege Assignment