Description
xinetd 2.1.8 and earlier runs with a default umask of 0, which could allow local users to read or modify files that are created by an application that runs under xinetd but does not set its own safe umask.
References
- CLA-2001:404 vendor-advisory
- ESA-20010621-01 vendor-advisory
- DSA-063 vendor-advisory
- MDKSA-2001:055 vendor-advisory
- xinetd-insecure-permissions(6657) vdb-entry
- 2826 vdb-entry
- RHSA-2001:075 vendor-advisory
- IMNX-2001-70-024-01 vendor-advisory