Vulnerability Details

ID: CVE-1999-1408

Last Modified: Oct. 18, 2016

Open in new window

Description

Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a socket to connect to a port on the localhost, calling shutdown to clear the socket, then using the same socket to connect to a different port on localhost.

CVSS V2

Access Vector: Local

Access Complexity: Low

Authentication: None

Confidentiality Impact: None

Integrity Impact: None

Availability Impact: Partial

Base Score: 2.1

Exploitability Score: 3.9

Impact Score: 2.9

CVSS V2: AV:L/AC:L/Au:N/C:N/I:N/A:P

Specialize CVSS-Score

CWE-ID

NVD-CWE-Other

Configuration

Condition		Configuration
OR
OR
	cpe:2.3:o:hp:hp-ux:10.01:::::::* Part: o Product: hp-ux Vendor: hp Version: 10.01	Alle Schwachstellen für hp
	cpe:2.3:o:ibm:aix:4.1.4:::::::* Part: o Product: aix Vendor: ibm Version: 4.1.4	Alle Schwachstellen für ibm
	cpe:2.3:o:ibm:aix:4.1.5:::::::* Part: o Product: aix Vendor: ibm Version: 4.1.5	Alle Schwachstellen für ibm
	cpe:2.3:o:ibm:aix:4.1.1:::::::* Part: o Product: aix Vendor: ibm Version: 4.1.1	Alle Schwachstellen für ibm
	cpe:2.3:o:hp:hp-ux:9.05:::::::* Part: o Product: hp-ux Vendor: hp Version: 9.05	Alle Schwachstellen für hp
	cpe:2.3:o:ibm:aix:4.1.2:::::::* Part: o Product: aix Vendor: ibm Version: 4.1.2	Alle Schwachstellen für ibm
	cpe:2.3:o:hp:hp-ux:10.20:::::::* Part: o Product: hp-ux Vendor: hp Version: 10.20	Alle Schwachstellen für hp
	cpe:2.3:o:ibm:aix:4.1:::::::* Part: o Product: aix Vendor: ibm Version: 4.1	Alle Schwachstellen für ibm
	cpe:2.3:o:ibm:aix:4.1.3:::::::* Part: o Product: aix Vendor: ibm Version: 4.1.3	Alle Schwachstellen für ibm

Pre-Condition

                    <?xml version="1.0" ?>
<set operator="and">
    <set operator="or">
        <prop key="operating_system" value="cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:hp:hp-ux:9.05:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*"/>
    </set>
    <prop key="program_influence" value="input"/>
    <prop key="range" value="local"/>
</set>

Post-Condition

                      <?xml version="1.0" ?>
<set operator="and">
    <set operator="or">
        <prop key="operating_system" value="cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:hp:hp-ux:9.05:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*"/>
        <prop key="operating_system" value="cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*"/>
    </set>
    <set operator="or">
        <prop key="program_influence" value="input"/>
        <prop key="program_influence" value="existence"/>
    </set>
    <prop key="range" value="local"/>
</set>