CVE-1999-1075
MediumExploitation Probability (EPSS)
Elevated risk66th percentile - higher than 66% of all known CVEs
Summary
inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver, but inadvertently listens on port N-1, allowing remote attackers to cause a denial of service via a large number of connections to port N-1.
Risk Assessment
Attackers can exploit this vulnerability to overload the server, leading to service unavailability for users.
Recommendation
It is recommended to update the AIX system to a newer version to eliminate this vulnerability and to monitor ports for unauthorized connections.
Original NVD description (English source)
inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denial of service via a large number of connections to port N-1, which are not properly closed by inetd.