Vulnerability Note VU#102345

IBM AIX vulnerable to DoS

Overview

A denial-of-service vulnerability in AIX may allow a remote attacker to consume 100% of the CPU.

I. Description

AIX is a UNIX operating system distributed by IBM. A vulnerability in AIX 4.3.3 may allow a remote attacker to cause a denial of service. For more information, please see IBM APAR IY31641.

II. Impact

A remote attacker may be able to consume 100% of the CPU, resulting in a denial of service.

III. Solution

Apply a patch.

Systems Affected

Vendor	Status	Date Updated
IBM	Vulnerable	11-Jun-2003

References

http://www-1.ibm.com/servers/aix/
http://www-1.ibm.com/servers/aix/overview/index.html
http://techsupport.services.ibm.com/support/rs6000.support/fixsearch?fixdb=aix4&srchtype=apar&query=IY31641
http://www-1.ibm.com/support/docview.wss?rs=0&q=IY31641&uid=isg1IY31641&loc=en_US&cs=utf-8&cc=us&lang=en

Credit

This vulnerability was discovered by Mauro Flores <maflores@antel.com.uy> and Guillermo Freire <gfreire@antel.com.uy>.

This document was written by Ian A Finlay.

Other Information

Date Public	10/09/2002
Date First Published	06/12/2003 09:24:43 AM
Date Last Updated	06/12/2003
CERT Advisory
CVE Name	CAN-2002-1201
Metric	9.00
Document Revision	7

If you have feedback, comments, or additional information about this vulnerability, please send us email.