CVE-1999-1013

CVE-1999-1013 affects AIX 4.1.5 and 4.2.1 via the named-xfer component. A flaw allows members of the system group to overwrite system files and gain root access by abusing the -f parameter together with a malformed zone file. Root cause is improper validation of file operations and zone-file pars...

CVE-1999-1075

inetd in AIX 4.1.5 assigns a dynamic port N for ttdbserver but also listens on port N-1 and does not pass control to ttdbserver. This enables a denial of service via a flood of connections to N-1 that are not properly closed by inetd. No exploits or remediation are provided in the supplied docume...

CVE-1999-1075: Undefined Security Weakness

inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver ToolTalk server, but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denial of service via a large number of connections to port N-1, which are not...