Home  >  CVE-2002-1201
CVE Details for CVE: CVE-2002-1201
Summary
IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a flood of malformed TCP packets without any flags set, which prevents AIX from releasing the associated memory buffers.
Timestamps
Last major update 18-10-2016 - 02:24
Published 28-10-2002 - 05:00
Last modified 18-10-2016 - 02:24
References
Vulnerable Configurations
  • cpe:2.3:o:ibm:aix:5:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:aix:5:*:*:*:*:*:*:*
  • cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
5.0
Impact
2.9
Exploitability
10.0
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
CVSS3
None
VIA4 references
cvss-vector via4
AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
aixapar IY31641
bid 5925
bugtraq 20021009 Flood ACK packets cause AIX DoS
cert-vn VU#102345
xf aix-tcp-flood-dos(10326)