Description
Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execute arbitrary commands via a length argument of zero or less, which disables the length check.
References
- 2971 vdb-entry
- xinetd-zero-length-bo(6804) vdb-entry
- CLA-2001:406 vendor-advisory
- RHSA-2001:092 vendor-advisory
- IMNX-2001-70-029-01 vendor-advisory