CVE-2000-0536

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host does not have a reverse DNS entry.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2000/20000619
http://www.securityfocus.com/bid/1381Exploit, Patch, Vendor Advisory
http://www.synack.net/xinetd/Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4986
http://www.debian.org/security/2000/20000619
http://www.securityfocus.com/bid/1381Exploit, Patch, Vendor Advisory
http://www.synack.net/xinetd/Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4986

Timeline

Published: Jun 4, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-05377.2BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file with the BRUEXECLOG e CVE-2000-05385.0ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password.CVE-2000-05396.4Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the Session CVE-2000-05405.0JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files (e.g. via viewsource.jsp) or obtain configuration in CVE-2000-05417.2The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command.CVE-2000-05425.0Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login auth CVE-2000-05435.0The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if their hostname does not CVE-2000-05445.0Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain CVE-2000-05454.6Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (carbon copy) paramete CVE-2000-05465.0Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey CVE-2000-05475.0Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4 CVE-2000-05485.0Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e_msg variable in the kerb_err_reply