Home | FAQ | Contact | Privacy Policy
US-CERT
Vulnerability
Notes
Database

Search Vulnerability Notes

Vulnerability Notes Help Information
 

 View Notes By
Name

ID Number

CVE Name

Date Public

Date Published

Date Updated

Severity Metric

 Other Documents
Technical Alerts

Technical Bulletins

Alerts

Security Tips

IBM Corporation Information for VU#498440

Date Notified03/08/2001
Date Modified08/02/2007 10:33:35 AM
Status SummaryNot Vulnerable

Vendor Statement

We have studied the document written by Guardent regarding vulnerabilities
caused by statistical analysis of random increments, that may allow a
malicious user to predict the next sequence of chosen TCP connections.

IBM's AIX operating system should not be vulnerable as we have implemented
RFC 1948 in our source coding. According to Guardent, we do not expect an
exploit described in the document to affect our AIX OS because we employ
RFC 1948.

US-CERT Addendum

The CERT/CC has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us email.
 

Produced 2008 by US-CERT, a government organization
Disclaimers and copyright information