CVE-2012-0862: builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enable...

Security readout for executives and security teams

This issue can make xinetd expose services through the TCPMUX listener on port 1 when tcpmux-server is enabled. That may let a remote attacker reach services that administrators expected to be restricted. Business impact depends heavily on whether legacy xinetd systems still run this configuration and whether port 1 is reachable. Exposure is most likely on legacy Linux or Unix systems running xinetd before 2.3.15 with tcpmux-server enabled and TCP port 1 reachable from untrusted networks. Treat this as a targeted legacy exposure issue, not a broad emergency. Prioritize internet-facing or partner-accessible systems first, especially if they run unsupported distributions or old xinetd packages. Mitigation focus: Upgrade xinetd to 2.3.15 or a vendor-fixed package.; Disable tcpmux-server if it is not required.; Restrict TCP port 1 to trusted networks or block it..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.