Lucene search

MitreCVE-2002-0871

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2002-0871

2003-04-0205:00:00

mitre

web.nvd.nist.gov

xinetd

2.3.4

file descriptor

leak

denial of service

nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

25.1%

JSON

xinetd 2.3.4 leaks file descriptors for the signal pipe to services that are launched by xinetd, which could allow those services to cause a denial of service via the pipe.

Affected configurations

Nvd

Node

xinetdxinetdMatch2.3.4

xinetdxinetdMatch2.3.5

xinetdxinetdMatch2.3.6

VendorProductVersionCPE
xinetdxinetd2.3.4cpe:2.3:a:xinetd:xinetd:2.3.4:*:*:*:*:*:*:*
xinetdxinetd2.3.5cpe:2.3:a:xinetd:xinetd:2.3.5:*:*:*:*:*:*:*
xinetdxinetd2.3.6cpe:2.3:a:xinetd:xinetd:2.3.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
xinetd	xinetd	2.3.4	cpe:2.3:a:xinetd:xinetd:2.3.4:::::::*
xinetd	xinetd	2.3.5	cpe:2.3:a:xinetd:xinetd:2.3.5:::::::*
xinetd	xinetd	2.3.6	cpe:2.3:a:xinetd:xinetd:2.3.6:::::::*

References

marc.info/?l=bugtraq&m=102935383506155&w=2

www.iss.net/security_center/static/9844.php

www.linux-mandrake.com/en/security/2002/MDKSA-2002-053.php

www.redhat.com/support/errata/RHSA-2002-196.html

www.redhat.com/support/errata/RHSA-2003-228.html

www.securityfocus.com/bid/5458

www.debian.org/security/2002/dsa-151

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

25.1%

JSON

Related for CVE-2002-0871