Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Gentoo: 200305-08 Critical xinetd Remote Memory Leak Exploit

gentoo
Calendar Grey May 19, 2003
Dist Gentoo Esm H88
Gentoo Security Notice 202305-16 informs about a vulnerability in rsync causing potential data exposure; users should update promptly.
Steve Stubb has discovered that xinetd leaks 144 bytes for every connection it rejects.

Summary


GENTOO LINUX SECURITY ANNOUNCEMENT 200305-08


Steve Stubb has discovered that xinetd leaks 144 bytes for every 
connection it rejects.

Read the full advisory at: 
http://marc.theaimsgroup.com/?l=bugtraq&m=105068673220605&w=2

SOLUTION

It is recommended that all Gentoo Linux users who are running
sys-apps/xinetd upgrade to xinetd-2.3.11 as follows

emerge sync
emerge xinetd
emerge clean

aliz@gentoo.org - GnuPG key is available at

Topics%20covered

Topics Covered

security advisory gentoo remote exploit memory leak xinetd

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
critical
Lowest
Low
Medium
High
Critical

PACKAGE : xinetd
SUMMARY : memory leak
DATE : 2003-05-19 14:00 UTC
EXPLOIT : remote
VERSIONS AFFECTED : =xinetd-2.3.11 CVE : CAN-2003-0211

Topics%20covered

Topics Covered

security advisory gentoo remote exploit memory leak xinetd

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround

Your message here