Korean
<< Back
VID 14056
Severity 40
Port 22
Protocol TCP
Class LSC
Detailed Description The host system's /etc/(x)inetd.conf file's permission or owner is unsafe. Internet Super-deamon runs internet services deamons which is Internal program registered in /etc/inetd.conf. if (x)Inetd.conf's permission is set unsafely, unauthorised attacker can register malicious programs and run malicious programs with root privilege.

* Platforms Affected:
UNIX, Linux
Recommendation Reset permissions of the file lower than 600 as the following (in case of Solaris /etc/inet/inetd.conf)
chmod 600 /etc/(x)inetd.conf

if the owner of the file is not root, change the owner
chown root /etc/(x)inetd.conf
Related URL (CVE)
Related URL (SecurityFocus)
Related URL (ISS)