CVE-2001-0825: Xinetd

High severity, CVSS 10.0. EPSS: 3.6% chance of exploitation in the next 30 days.

Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execute arbitrary commands via a length argument of zero or less, which disables the length check.

Affected products

• Xinetd Xinetd: up to and including 2.3.1; version 2.1.8.8 only; version 2.1.8.9 only; version 2.3.0 only

Published 2001-12-06. Last modified 2026-06-16.