CVE-1999-0087: Medium severity IBM AIX vulnerability
Denial of service in AIX telnet can freeze a system and prevent users from accessing the server.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
IBM AIX telnetfrom your environment.Uninstall or remove the telnet package from affected systems where telnet functionality is not required.
- Configuration
Disable the telnet daemon/service on affected AIX systems if telnet is not required to prevent exploitation of the denial-of-service issue.
AIX telnet telnet_service = disabled - Compensating control
Restrict or block incoming telnet (TCP port 23) at perimeter firewalls, host-based firewalls, or network ACLs; allow access only from trusted management IPs if telnet must remain available.
- Operational
Ensure alternative management access (SSH, serial/console, or out-of-band management) is available and have recovery procedures (console access and controlled reboot) ready to recover systems that freeze due to the telnet denial-of-service.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0087?
CVE-1999-0087 has a critical severity rating as it can lead to a denial of service, freezing the system.
How do I fix CVE-1999-0087?
To fix CVE-1999-0087, it is recommended to apply the latest security patches provided by IBM for AIX.
Which versions of AIX are affected by CVE-1999-0087?
CVE-1999-0087 affects IBM AIX versions 4.1, 4.2, and 4.3.
What type of attack does CVE-1999-0087 demonstrate?
CVE-1999-0087 demonstrates a denial of service attack that can prevent users from accessing the AIX server.
Can CVE-1999-0087 be exploited remotely?
Yes, CVE-1999-0087 can be exploited remotely through the telnet service on the affected AIX versions.