ID OSVDB:7992 Type osvdb Reporter OSVDB Modified 1998-02-11T00:00:00
Description
Vulnerability Description
IBM AIX contains a flaw that may allow a remote denial of service. The issue is triggered when telnetd receives an attack and system runs out of message blocks and hangs, and will result in loss of availability for the telnet service and all other tty activity to hang.
Solution Description
Upgrade AIX using the patch numbers AIX 4.1: IX73427, AIX 4.2: IX73580 and AIX 4.3: IX73214 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
Short Description
IBM AIX contains a flaw that may allow a remote denial of service. The issue is triggered when telnetd receives an attack and system runs out of message blocks and hangs, and will result in loss of availability for the telnet service and all other tty activity to hang.
References:
Vendor Specific Solution URL: http://www-1.ibm.com/support/docview.wss?uid=isg1IX73580
ISS X-Force ID: 706
CVE-1999-0087
CIAC Advisory: i-029
{"type": "osvdb", "published": "1998-02-11T00:00:00", "href": "https://vulners.com/osvdb/OSVDB:7992", "hashmap": [{"key": "affectedSoftware", "hash": "34e809b1a8f9e5acb012936175495753"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "b8be1c0e57deef7febd00f2d1b6dc576"}, {"key": "cvss", "hash": "84813b1457b92d6ba1174abffbb83a2f"}, {"key": "description", "hash": "660036ec64db501d879b5c7eee8d9c81"}, {"key": "href", "hash": "4c74d4baa2da8a0fa11d5cdfcfc5a2f2"}, {"key": "modified", "hash": "3ed11e157e70b0956347ad3f0e60f17a"}, {"key": "objectVersion", "hash": "56765472680401499c79732468ba4340"}, {"key": "published", "hash": "3ed11e157e70b0956347ad3f0e60f17a"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "955b328dc7cd615c13af5464c9183464"}, {"key": "title", "hash": "0f352cb130e003db5580e13650d008bc"}, {"key": "type", "hash": "1327ac71f7914948578f08c54f772b10"}], "bulletinFamily": "software", "cvss": {"vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/", "score": 5.0}, "viewCount": 2, "history": [], "edition": 1, "objectVersion": "1.2", "reporter": "OSVDB", "title": "AIX telnet Login Remote DoS", "affectedSoftware": [{"operator": "eq", "version": "4.3", "name": "AIX"}, {"operator": "eq", "version": "4.2", "name": "AIX"}, {"operator": "eq", "version": "4.1", "name": "AIX"}], "enchantments": {"score": {"value": 5.5, "vector": "NONE", "modified": "2017-04-28T13:20:03"}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-1999-0087"]}], "modified": "2017-04-28T13:20:03"}, "vulnersScore": 5.5}, "references": [], "id": "OSVDB:7992", "hash": "5ff1b63b3ffa66a714a1d8e8de7c3147186e53a0167ad83a5fe16cdd080380e8", "lastseen": "2017-04-28T13:20:03", "cvelist": ["CVE-1999-0087"], "modified": "1998-02-11T00:00:00", "description": "## Vulnerability Description\nIBM AIX contains a flaw that may allow a remote denial of service. The issue is triggered when telnetd receives an attack and system runs out of message blocks and hangs, and will result in loss of availability for the telnet service and all other tty activity to hang.\n## Solution Description\nUpgrade AIX using the patch numbers AIX 4.1: \u00a0IX73427, AIX 4.2: IX73580 and AIX 4.3: \u00a0IX73214 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nIBM AIX contains a flaw that may allow a remote denial of service. The issue is triggered when telnetd receives an attack and system runs out of message blocks and hangs, and will result in loss of availability for the telnet service and all other tty activity to hang.\n## References:\nVendor Specific Solution URL: http://www-1.ibm.com/support/docview.wss?uid=isg1IX73580\nISS X-Force ID: 706\n[CVE-1999-0087](https://vulners.com/cve/CVE-1999-0087)\nCIAC Advisory: i-029\n"}
{"cve": [{"lastseen": "2019-05-29T18:07:35", "bulletinFamily": "NVD", "description": "Denial of service in AIX telnet can freeze a system and prevent users from accessing the server.", "modified": "2008-09-09T12:33:00", "id": "CVE-1999-0087", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-1999-0087", "published": "1998-02-01T05:00:00", "title": "CVE-1999-0087", "type": "cve", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}]}