CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 7.6
CWE Name:  Permissions Privileges and Access Controls
Summary: xinetd does not enforce the user and group configuration directives for tcpmux services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service.
Access Authentication: NONE
Access Complexity: HIGH
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2013-10-10
Last Modified Date: 2019-04-22