CVE-2013-4342: xinetd ignores user and group directives for tcpmux services
xinetd did not drop privilege before creating tcpmux process which would allow processes to run with the same privilege as xinetd (root).  Long lost, this was ffirst reported on a debian mailing list in 2005 <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=324678> and later rediscovered <https://bugzilla.redhat.com/show_bug.cgi?id=1006100>.