|
|
|
View Notes By
|
|
|
|
Other Documents
|
|
|
|
|
IBM Information for VU#302220
| Date Notified: | 2005-05-09 |
| Date Updated: | |
| Statement Date: | |
| Status Summary: | Not Vulnerable |
Vendor StatementThe AIX Operating System is not vulnerable to the issues described in NISCC advisory 004033 or CERT Vulnerability Note VU#302220.
IBM recommends that IPSec be configured with AH support. IPSec will be configured with AH support if it is configured via SMIT or WebSM. It is possible to configure IPSec without AH support using the gentun command. However, even if IPSec is configured without AH support, AIX is not affected by the vulnerabilities described by NISCC advisory 004033. Future versions of the gentun command will remove the possibility for system administrators to configure IPSec without AH support.Vendor InformationThe vendor has not provided us with any further information regarding this vulnerability.
AddendumUS-CERT has no additional comments at this time.
If you have feedback, comments, or additional information about this vulnerability, please send us
email.
|
 |