Test ID:	1.3.6.1.4.1.25623.1.0.120192
Category:	Amazon Linux Local Security Checks
Title:	Amazon Linux: Security Advisory (ALAS-2013-232)
Summary:	The remote host is missing an update for the 'xinetd' package(s) announced via the ALAS-2013-232 advisory.
Description:	Summary: The remote host is missing an update for the 'xinetd' package(s) announced via the ALAS-2013-232 advisory. Vulnerability Insight: It was found that xinetd ignored the user and group configuration directives for services running under the tcpmux-server service. This flaw could cause the associated services to run as root. If there was a flaw in such a service, a remote attacker could use it to execute arbitrary code with the privileges of the root user. (CVE-2013-4342) Affected Software/OS: 'xinetd' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 7.6 CVSS Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4342 GLSA-201611-06 https://security.gentoo.org/glsa/201611-06 RHSA-2013:1409 http://rhn.redhat.com/errata/RHSA-2013-1409.html https://bugzilla.redhat.com/show_bug.cgi?id=1006100 https://github.com/xinetd-org/xinetd/pull/10
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.