Vulnerabilities > CVE-2002-1201 - Remote Empty TCP Flag Flood Denial Of Service vulnerability in IBM AIX 4.3.3/5

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
ibm

Summary

IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a flood of malformed TCP packets without any flags set, which prevents AIX from releasing the associated memory buffers.

Vulnerable Configurations

Part Description Count
OS
Ibm
2