Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2001-1322

xinetd 2.1.8 and earlier runs with a default umask of 0, which could allow local users to read or modify files that are created by an application that runs under xinetd but does not set its own safe umask.

Published

2001-07-10T04:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 3.6 (LOW)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:N

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

3.9

Impact Score

4.9

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application xinetd xinetd 2.1.8.8 Yes
Application xinetd xinetd 2.1.8.8_pre3 Yes
Application xinetd xinetd 2.1.8.9_pre1 Yes
Application xinetd xinetd 2.1.8.9_pre2 Yes
Application xinetd xinetd 2.1.8.9_pre3 Yes
Application xinetd xinetd 2.1.8.9_pre4 Yes
Application xinetd xinetd 2.1.8.9_pre5 Yes
Application xinetd xinetd 2.1.8.9_pre7 Yes
Application xinetd xinetd 2.1.8.9_pre8 Yes
Application xinetd xinetd 2.1.8.9_pre9 Yes
Application xinetd xinetd 2.1.8.9_pre10 Yes
Application xinetd xinetd 2.1.8.9_pre11 Yes
Application xinetd xinetd 2.1.8.9_pre12 Yes
Application xinetd xinetd 2.1.8.9_pre13 Yes
Application xinetd xinetd 2.1.8.9_pre14 Yes
Application xinetd xinetd 2.1.8.9_pre15 Yes
References