CVE-2001-0825 Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execute arbitrary commands via a length argument of zero or less, which disables the length che...
HighCVSS 10.0
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execute arbitrary commands via a length argument of zero or less, which disables the length check.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xinetd | <= 2.3.1 | No fix listed |
| xinetd | = 2.1.8.8 | No fix listed |
| xinetd | = 2.1.8.9 | No fix listed |
| xinetd | = 2.3.0 | No fix listed |
References
- CLA-2001:406 patch vendor-advisory
- IMNX-2001-70-029-01 vendor-advisory
- RHSA-2001:092 patch vendor-advisory
- 2971 patch vdb-entry vendor-advisory
- xinetd-zero-length-bo(6804) vdb-entry