CVE-2001-1322

LowCVSS 3.6/10Last modified Jun 16, 2026

Description

xinetd 2.1.8 and earlier runs with a default umask of 0, which could allow local users to read or modify files that are created by an application that runs under xinetd but does not set its own safe umask.

Metrics

CVSS 2.0 3.6/10AV:L/AC:L/Au:N/C:P/I:P/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jul 10, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-13237.5Buffer overflow in MIT Kerberos 5 (krb5) 1.2.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitraCVE-2001-13244.6cvmlogin and statfile in Paul Jarc idtools before 2001.06.27 do not properly check the return value of a call to the pathexec_env function, CVE-2001-13257.5Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled CVE-2001-13267.5Eudora 5.1 allows remote attackers to execute arbitrary code when the "Use Microsoft Viewer" option is enabled and the "allow executables inCVE-2001-13274.6pmake before 2.1.35 in Turbolinux 6.05 and earlier is installed with setuid root privileges, which could allow local users to gain privilegeCVE-2001-13287.5Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code.CVE-2001-13297.2Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.CVE-2001-13307.2Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.CVE-2001-13311.2mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options (1) -u or (2) -c, wCVE-2001-13327.5Buffer overflows in Linux CUPS before 1.1.6 may allow remote attackers to execute arbitrary code.CVE-2001-13331.2Linux CUPS before 1.1.6 does not securely handle temporary files, possibly due to a symlink vulnerability that could allow local users to ovCVE-2001-13345.0Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrary files by creating
CVE-2001-1322: Low severity, CVSS 3.6 | Vulnix