Logo
vulnerabilityCVE-2013-4342
Name
CVE-2013-4342
Source
NVD ( link)Debian ( link)
Description
xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
xinetd
Patched

Vulnerability Rating#


7.6
CVSSv2

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
master
2.3.15.4
Not Affected
openwrt
master
2.3.15.4-r1
Not Affected
openwrt
openwrt-25.12
2.3.15-r18
Not Affected
yocto
kirkstone
2.3.15.4
Not Affected
yocto
master
2.3.15.4
Not Affected
yocto
scarthgap
2.3.15.4
Not Affected

Resolved with patches#


xinetd (buildroot:2025.02.x)

#
Title
Author
Resolve
1
CVE-2013-4342: xinetd: ignores user and group directives for
Thomas Swan <thomas.swan@gmail.com>
CVE-2013-4342