Is CVE-1999-1408 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-1999-1408 being exploited in the wild.

How severe is CVE-1999-1408?

Low severity, with a CVSS score of 2.1, published 5 March 1997.

Which products and versions are affected?

Hp-Ux 10.01, 9.05; IBM Aix 4.1.4.

Is there a fix for CVE-1999-1408?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-1999-1408 attacked?

It is attacked with local access, in an operating system.

Am I affected by CVE-1999-1408?

Check whether you run Hp-Ux or IBM Aix at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-1999-1408: IBM AIX and HP-UX denial of service via socket reuse

CVE-1999-1408 · Severity: low · CVSS 2.1 · Published 1997-03-05

A vulnerability in the networking components of IBM AIX and HP-UX operating systems allows a local user to crash the entire system. By running a simple sequence of network commands on the machine, an attacker can trigger a kernel failure, leading to a complete service outage. This affects the availability of the server and any applications running on it, though it does not directly expose sensitive data.

Technologies: Hp-Ux, IBM Aix. Vendors: Hp, IBM.

Quick answers

Is CVE-1999-1408 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-1999-1408 being exploited in the wild.
How severe is CVE-1999-1408?: Low severity, with a CVSS score of 2.1, published 5 March 1997.
Which products and versions are affected?: Hp-Ux 10.01, 9.05; IBM Aix 4.1.4.
Is there a fix for CVE-1999-1408?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-1999-1408 attacked?: It is attacked with local access, in an operating system.
Am I affected by CVE-1999-1408?: Check whether you run Hp-Ux or IBM Aix at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A kernel-level denial of service vulnerability exists in the TCP/IP stack of AIX 4.1.4 and specific HP-UX versions. The flaw is triggered when a local process creates a TCP socket, connects to a local port, calls shutdown() to clear the socket state, and then immediately attempts to reuse the same socket to connect to a different local port. This sequence causes a kernel panic or system crash. The vulnerability requires local shell access to execute the malicious code but does not require administrative privileges.

Affected products

IBM AIX 4.1.4
HP HP-UX 10.01, 9.05

Timeline

1997-03-05: disclosed: Initial discovery reported on Bugtraq mailing list
1997-03-05: advisory: NVD published date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.