Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
xinetd 2.1.8 and earlier runs with a default umask of 0, which could allow local users to read or modify files that are created by an application that runs under xinetd but does not set its own safe umask.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
xinetd 缺省umask设置不安全
Vulnerability Description
CVE(CAN) ID: CVE-2001-1322 Xinetd运行时使用umask=0。这意味着那些使用xinetd的umask并且自己又没有设置权限 的那些应用程序(例如samba软件包中的swat),可能创建全局可写的文件。 攻击者可能利用这些漏洞来改变文件属性或者获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A