Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execute arbitrary commands via a length argument of zero or less, which disables the length check.
| Software | From | Fixed in |
|---|---|---|
| xinetd / xinetd | - | 2.3.1.x |
| xinetd / xinetd | 2.1.8.8 | 2.1.8.8.x |
| xinetd / xinetd | 2.1.8.9 | 2.1.8.9.x |
| xinetd / xinetd | 2.3.0 | 2.3.0.x |