CVE-1999-1075: Medium severity IBM AIX vulnerability
inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denial of service via a large number of connections to port N-1, which are not properly closed by inetd.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
IBM AIX ttdbserver (ToolTalk)from your environment.Uninstall or remove the ttdbserver (ToolTalk server) from affected AIX systems if the service is not required.
- Configuration
Disable the ttdbserver (ToolTalk server) in inetd's configuration so inetd will not spawn the service (preventing inetd from listening on the dynamically-assigned port and the adjacent port).
inetd / ttdbserver (ToolTalk) ttdbserver_service = disabled - Compensating control
At the network perimeter or host firewall, block or restrict incoming access to the ToolTalk/ttdbserver ports (including the adjacent port that inetd may listen on, i.e. N-1) to trusted hosts only to mitigate denial-of-service attempts.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1075?
CVE-1999-1075 is classified as a denial of service vulnerability.
How do I fix CVE-1999-1075?
To fix CVE-1999-1075, you should apply patches provided by IBM for AIX version 4.1.5.
What are the consequences of CVE-1999-1075?
The consequences of CVE-1999-1075 include potential denial of service caused by a large number of connections to an unintended port.
Which systems are affected by CVE-1999-1075?
CVE-1999-1075 affects systems running IBM AIX version 4.1.5.
Can CVE-1999-1075 be exploited remotely?
Yes, CVE-1999-1075 can be exploited remotely through a large number of connections to port N-1.