IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a flood of malformed TCP packets without any flags set, which prevents AIX from releasing the associated memory buffers.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Aix | Ibm | 4.3.3 (including) | 4.3.3 (including) |
| Aix | Ibm | 5 (including) | 5 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=103418410408599\u0026w=2
- http://www-1.ibm.com/support/docview.wss?rs=0\u0026q=IY31641\u0026uid=isg1IY31641\u0026loc=en_US\u0026cs=utf-8\u0026cc=us\u0026lang=en
- http://www.iss.net/security_center/static/10326.php
- http://www.kb.cert.org/vuls/id/102345
- http://www.securityfocus.com/bid/5925
- http://marc.info/?l=bugtraq\u0026m=103418410408599\u0026w=2
- http://www-1.ibm.com/support/docview.wss?rs=0\u0026q=IY31641\u0026uid=isg1IY31641\u0026loc=en_US\u0026cs=utf-8\u0026cc=us\u0026lang=en
- http://www.iss.net/security_center/static/10326.php
- http://www.kb.cert.org/vuls/id/102345
- http://www.securityfocus.com/bid/5925