CyberSec.Space Logo
Back to CVE Browser

CVE-2000-0536

HIGH
7.5
CVSS Severity Score
EPSS Score0.1680%
EPSS Percentile29.35th
PublishedJun 4, 2000
Last ModifiedApr 16, 2026

Vulnerability Description

xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host does not have a reverse DNS entry.

Affected Platforms (CPE)

📦
Xinetd

Xinetd

= 2.1.87
📦
Xinetd

Xinetd

= 2.1.88
📦
Xinetd

Xinetd

= 2.1.88_pre1
📦
Xinetd

Xinetd

= 2.1.88_pre2
📦
Xinetd

Xinetd

= 2.1.89_pre1
📦
Xinetd

Xinetd

= 2.1.89_pre2
📦
Xinetd

Xinetd

= 2.1.89_pre3
📦
Xinetd

Xinetd

= 2.1.89_pre4
📦
Xinetd

Xinetd

= 2.1.89_pre5

References & Advisories

🔗 http://www.debian.org/security/2000/20000619
🔗 http://www.securityfocus.com/bid/1381
🔗 http://www.synack.net/xinetd/
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/4986
🔗 http://www.debian.org/security/2000/20000619
🔗 http://www.securityfocus.com/bid/1381
🔗 http://www.synack.net/xinetd/
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/4986

Related Vulnerabilities

CVE-2001-082510.0

Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execute arbitrary command...

CVE-2017-124779.8

It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has a...

CVE-2013-43427.6

xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as ...

CVE-2001-13897.5

Multiple vulnerabilities in xinetd 2.3.0 and earlier, and additional variants until 2.3.3, may allow remote attackers to cause a d...