PT-2004-1154 · Ibm · Aix

Publicado 2004-01-08 · Atualizado 2017-07-11 · CVE-2003-0696

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions AIX versions 5.1 through 5.2

Description The issue concerns the getipnodebyname() API, which fails to properly close sockets. This can be exploited by attackers to cause a denial of service through resource exhaustion.

Recommendations For AIX versions 5.1 and 5.2, consider restricting access to the getipnodebyname() API until a proper fix is available. As a temporary workaround, implement measures to monitor and limit socket usage to prevent resource exhaustion.

Correção

Identificadores relacionados

CVE-2003-0696

Produtos afetados

Aix

Referências · 4

• http://securityfocus.com/bid/8738 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13328 · Nota
• https://techsupport.services.ibm.com/server/pseries.subscriptionSvcs?mode=7&heading=AIX51&topic=SECURITY&month=200310&label=getipnodebyname%28%29+API+does+not+close+sockets.&date=20031001&bulletin=datafile150755&embed=true · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0696 · Nota de Segurança