CVE-2002-1201

IBM AIX 4.3.3 and 5 - Denial of Service via Malformed TCP Packet Flood

Title source: llm

Description

IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a flood of malformed TCP packets without any flags set, which prevents AIX from releasing the associated memory buffers.

References (5)

Core 5

Core References

Vendor Advisory vdb-entry x_refsource_xf

http://www.iss.net/security_center/static/10326.php

Various Sources vendor-advisory x_refsource_aixapar

http://www-1.ibm.com/support/docview.wss?rs=0&q=IY31641&uid=isg1IY31641&loc=en_US&cs=utf-8&cc=us&lang=en

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=103418410408599&w=2

US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/102345

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/5925

Scores

EPSS 0.0210

EPSS Percentile 79.8%

Details

Status published

Products (2)

ibm/aix 4.3.3

ibm/aix 5

Published Oct 28, 2002

Tracked Since Feb 18, 2026