Vulnerability in IBM Aix

CVE-1999-1075

inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denial of service via a large number of connections to port N-1, which are not properly closed by inetd.

EPSS: 0.013 (66.9th percentile) — read the EPSS interpretation.

Affected products

  • Ibm Aix — versions 4.1.5
  • N/a — versions n/a

References