CVE-2013-4342

Severity: high (CVSS 7.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-10-10 · updated 2026-06-16
Weakness: CWE-264

Description

xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service.

Affected products

Red Hat Enterprise Linux: 5, 6.0
Xinetd: all versions

References

http://rhn.redhat.com/errata/RHSA-2013-1409.html
https://bugzilla.redhat.com/show_bug.cgi?id=1006100
https://github.com/xinetd-org/xinetd/pull/10
https://security.gentoo.org/glsa/201611-06
http://rhn.redhat.com/errata/RHSA-2013-1409.html
https://bugzilla.redhat.com/show_bug.cgi?id=1006100
https://github.com/xinetd-org/xinetd/pull/10
https://security.gentoo.org/glsa/201611-06

Get alerted when CVE-2013-4342 or the next vulnerability affects your stack