IBM AIX contains a flaw that may allow a remote denial of service. The issue is triggered when telnetd receives an attack and system runs out of message blocks and hangs, and will result in loss of availability for the telnet service and all other tty activity to hang.
Classification
Location:
Remote / Network Access
Attack Type:
Denial of Service
Impact:
Loss of Availability
Exploit:
Exploit Public
Disclosure:
OSVDB Verified
Solution
Upgrade AIX using the patch numbers AIX 4.1: IX73427, AIX 4.2: IX73580 and AIX 4.3: IX73214 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
This product uses the Daylife API but is not endorsed or certified by Daylife.
This section lists the latest news and blogs found via the daylife API (and for older items, the technorati API), which mention or otherwise discuss this vulnerability.
