PT-2002-2183 · Ibm · Ibm Aix

Publicado 2002-10-15 · Atualizado 2016-10-18 · CVE-2002-1201

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: IBM AIX versions 4.3.3 through 5

Description: The issue allows remote attackers to cause a denial of service, resulting in CPU consumption or system crash, by sending a flood of malformed TCP packets without any flags set. This prevents the system from releasing the associated memory buffers.

Recommendations: For IBM AIX versions 4.3.3 through 5, consider implementing network traffic filtering to restrict malformed TCP packets without flags as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2002-1201

Produtos afetados

Ibm Aix

Referências · 6

• http://marc.info/?l=bugtraq&m=103418410408599&w=2 · Nota
• http://securityfocus.com/bid/5925 · Nota
• http://iss.net/security_center/static/10326.php · Aviso do Fabricante
• http://www-1.ibm.com/support/docview.wss?rs=0&q=IY31641&uid=isg1IY31641&loc=en_US&cs=utf-8&cc=us&lang=en · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1201 · Nota de Segurança
• http://kb.cert.org/vuls/id/102345 · Nota