Login


 
Newsletter
Werbung
Sicherheit: Mangelnde Rechteprüfung in xinetd
Aktuelle Meldungen Distributionen
Name: Mangelnde Rechteprüfung in xinetd
ID: FEDORA-2012-8041
Distribution: Fedora
Plattformen: Fedora 15
Datum: Di, 29. Mai 2012, 14:38
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0862

Originalnachricht

Name        : xinetd
Product : Fedora 15
Version : 2.3.14
Release : 37.fc15
URL : http://www.xinetd.org
Summary : A secure replacement for inetd
Description :
Xinetd is a secure replacement for inetd, the Internet services
daemon. Xinetd provides access control for all services based on the
address of the remote host and/or on time of access and can prevent
denial-of-access attacks. Xinetd provides extensive logging, has no
limit on the number of server arguments, and lets you bind specific
services to specific IP addresses on your host machine. Each service
has its own specific configuration file for Xinetd; the files are
located in the /etc/xinetd.d directory.

-------------------------------------------------------------------------------
-
Update Information:

Fix tcpmux security
-------------------------------------------------------------------------------
-
ChangeLog:

* Thu May 17 2012 Jan Synáček <jsynacek@redhat.com> - 2:2.3.14-37
- Fix tcpmux security
- Resolves: #820318 (CVE-2012-0862)
* Thu Apr 21 2011 Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 2:2.3.14-36
- Fix build warning about "dereferencing type-punned pointer"
Related: #695674
- Avoid possible hang while logging an unexpected signal
Related: #501604
- Let RPC services bind to a specific port
Related: #624800
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #790940 - CVE-2012-0862 xinetd: enables unintentional services over
tcpmux port
https://bugzilla.redhat.com/show_bug.cgi?id=790940
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program. Use
su -c 'yum update xinetd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Pro-Linux
Pro-Linux @Twitter
Neue Nachrichten
Werbung