CVE Feed

    Dashboard / CVE / CVE-2000-0536

    CVE-2000-0536

    xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host does not have a reverse DNS entry.

    Published:Jun 4, 2000
    Last Modified:Apr 16, 2026
    EPS:Oct 13, 2000
    EPSS Score:0.00438
    CVSS Score:7.5

    Affected Products

    Vendor
    Xinetd
    Product
    Xinetd

    Exploits

    http://www.securityfocus.com/bid/1381http://www.securityfocus.com/bid/1381

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2012-0862 (CVSS 4.3) — builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, …
    CVE-2013-4342 (CVSS 7.6) — xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these se…
    CVE-2003-0211 (CVSS 5) — Memory leak in xinetd 2.3.10 allows remote attackers to cause a denial of service (memory consumption) via a l…
    CVE-2002-0871 (CVSS 2.1) — xinetd 2.3.4 leaks file descriptors for the signal pipe to services that are launched by xinetd, which could a…
    CVE-2001-1389 (CVSS 7.5) — Multiple vulnerabilities in xinetd 2.3.0 and earlier, and additional variants until 2.3.3, may allow remote at…
    CVE-2001-0825 (CVSS 10) — Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execu…
    CVE-2001-1322 (CVSS 3.6) — xinetd 2.1.8 and earlier runs with a default umask of 0, which could allow local users to read or modify files…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High