PT-2001-2528 · Compaq · Compaq Tru64 Unix

Published 2001-02-23 · Updated 2017-07-11 · CVE-2001-1435

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Compaq Tru64 UNIX version 5.1

Description The issue allows attackers to cause a denial of service, resulting in network connection loss. This occurs when one of the services handled by inetd core dumps during startup, causing inetd to stop accepting connections to all of its services.

Recommendations For Compaq Tru64 UNIX version 5.1, consider restricting access to services handled by inetd to minimize the risk of exploitation. As a temporary workaround, monitor inetd services for core dumps and restart them as necessary to maintain network connectivity. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2001-1435

Affected Products

Compaq Tru64 Unix

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2001-1435 · Security Note
• http://securityfocus.com/archive/1/165535 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6157 · Note
• http://kb.cert.org/vuls/id/880624 · Note