Rapid7 Vulnerability & Exploit Database

RHSA-2001:075: Updated xinetd package available for Red Hat Linux 7 and 7.1

Back to Search

RHSA-2001:075: Updated xinetd package available for Red Hat Linux 7 and 7.1

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
10/18/2001
Created
07/25/2018
Added
10/28/2005
Modified
07/04/2017

Description

Xinetd runs with umask 0 - this means that applications using the xinetd umask and not setting the permissions themselves (like swat from the samba package), will create world writable files.

Xinetd runs with umask 0 - this means that applications using the xinetd umask and not setting the permissions themselves (like swat from the samba package), will create world writable files. This update sets the default umask to 022. Also, the web interface for linuxconf did not work in Red Hat Linux 7.1. Other minor issues have also been addressed.

Solution(s)

  • redhat-upgrade-xinetd

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;