CVE-1999-0903: High severity IBM AIX vulnerability
genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Add explicit packet-filtering rules on the AIX host to deny traffic to destination ports 32768-65535 (i.e., all ports >32767) so that traffic to those ports is blocked despite the genfilt filtering issue.
IBM AIX packet filtering (genfilt) destination_port_rules = deny ports 32768-65535 - Compensating control
Apply network-level blocking for destination ports greater than 32767 (for example, perimeter firewall, router ACLs, or upstream filtering devices) to prevent traffic to destination ports 32768-65535 until a vendor fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0903?
CVE-1999-0903 is considered a high severity vulnerability due to its potential to allow unauthorized access to systems.
How do I fix CVE-1999-0903?
To fix CVE-1999-0903, you should upgrade to a version of AIX later than 4.3.2 that addresses this vulnerability.
What types of systems are affected by CVE-1999-0903?
CVE-1999-0903 specifically affects IBM AIX version 4.3.2.
Can CVE-1999-0903 be exploited remotely?
Yes, CVE-1999-0903 can be exploited remotely, potentially allowing attackers to bypass firewall filtering.
What is the impact of not addressing CVE-1999-0903?
Not addressing CVE-1999-0903 may result in unauthorized access and the potential compromise of system integrity.