PT-2001-2180 · Compaq · Compaq Trucluster

Published 2001-09-25 · Updated 2017-12-19 · CVE-2001-1033

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Compaq TruCluster version 1.5

Description The issue allows remote attackers to cause a denial of service via a port scan from a system that does not have a DNS PTR record, which causes the cluster to enter a "split-brain" state.

Recommendations For Compaq TruCluster version 1.5, consider implementing DNS PTR records for all systems that interact with the cluster to prevent the cluster from entering a "split-brain" state due to port scans from systems without DNS PTR records. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2001-1033

Affected Products

Compaq Trucluster

References · 4

• http://securityfocus.com/bid/3362 · Vendor Advisory
• http://securityfocus.com/archive/1/216323 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1033 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7171 · Note