CVE-2002-1201: Medium severity IBM AIX vulnerability

Published Oct 15, 2002

Updated

IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a flood of malformed TCP packets without any flags set, which prevents AIX from releasing the associated memory buffers.

Affected Software

2 affected components

IBM AIX=5

IBM AIX=4.3.3

Event History

Oct 15, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1201?

CVE-2002-1201 is classified as a denial of service vulnerability that can lead to significant impacts on system availability.

How does CVE-2002-1201 affect IBM AIX systems?

CVE-2002-1201 allows remote attackers to flood IBM AIX systems with malformed TCP packets, causing CPU consumption or crashes.

How do I fix CVE-2002-1201 on my IBM AIX system?

To mitigate CVE-2002-1201, ensure that your IBM AIX system is updated to the latest supported version and consider implementing network filtering to limit malformed packets.

Can CVE-2002-1201 be exploited remotely?

Yes, CVE-2002-1201 can be exploited remotely by sending a stream of malformed TCP packets to the vulnerable AIX systems.

What versions of IBM AIX are affected by CVE-2002-1201?

CVE-2002-1201 affects IBM AIX versions 4.3.3 and 5.0.