The TCP implementation in IBM AIX 5.3, 6.1, and 7.1, when the Large Send Offload option is enabled, allows remote attackers to cause a denial of service (assertion failure and panic) via an unspecified series of packets.

The remote host is missing AIX PTF U849877, which is related to the security of the package bos.net.tcp.client.

AIX could allow a remote attacker to cause a denial of service, caused by an error when the TCP large send offload option is enabled on a network interface. By sending a specially crafted sequence of packets, an attacker could exploit this vulnerability to cause a kernel panic.

The remote host is missing AIX PTF U849815, which is related to the security of the package bos.net.tcp.client.

AIX could allow a remote attacker to cause a denial of service, caused by an error when the TCP large send offload option is enabled on a network interface. By sending a specially crafted sequence of packets, an attacker could exploit this vulnerability to cause a kernel panic.

The remote host is missing AIX PTF U849490, which is related to the security of the package bos.net.tcp.client.

AIX could allow a remote attacker to cause a denial of service, caused by an error when the TCP large send offload option is enabled on a network interface. By sending a specially crafted sequence of packets, an attacker could exploit this vulnerability to cause a kernel panic.

The remote host is missing AIX PTF U848205, which is related to the security of the package bos.net.tcp.client.

AIX could allow a remote attacker to cause a denial of service, caused by an error when the TCP large send offload option is enabled on a network interface. By sending a specially crafted sequence of packets, an attacker could exploit this vulnerability to cause a kernel panic.

The remote host is missing AIX PTF U848193, which is related to the security of the package bos.net.tcp.client.

AIX could allow a remote attacker to cause a denial of service, caused by an error when the TCP large send offload option is enabled on a network interface. By sending a specially crafted sequence of packets, an attacker could exploit this vulnerability to cause a kernel panic.

The remote host is missing AIX PTF U846347, which is related to the security of the package bos.net.tcp.client.

Vulnerability which allows remote attackers to (1) register or (2) unregister RPC services, and consequently cause a denial of service or obtain sensitive information from interprocess communication, via crafted UDP packets containing service commands. 

Note: The ifix provided also contains the fix for CVE-2012-0194 and CVE-2011-1385 since they affect the same fileset.

See the following for CVE-2012-0194:
https://aix.software.ibm.com/aix/efixes/security/large_send_a dvisory.asc CVE-2011-1385:
https://aix.software.ibm.com/aix/efixes/security/icmp_advisor y.asc.

The remote host is missing AIX PTF U843468, which is related to the security of the package bos.net.tcp.client.

AIX could allow a remote attacker to cause a denial of service, caused by an error when the TCP large send offload option is enabled on a network interface. By sending a specially crafted sequence of packets, an attacker could exploit this vulnerability to cause a kernel panic.

The remote host is missing AIX PTF U841068, which is related to the security of the package bos.net.tcp.client.

AIX could allow a remote attacker to cause a denial of service, caused by an error when the TCP large send offload option is enabled on a network interface. By sending a specially crafted sequence of packets, an attacker could exploit this vulnerability to cause a kernel panic.

The remote host is running a version of IBM AIX that could allow a remote attacker to cause a denial of service, due to an error when the TCP large send offload option is enabled on a network interface.
By sending a specially crafted sequence of packets, an attacker could exploit this vulnerability to cause a kernel panic. 

Note that this plugin requires RFC 1323 to be enabled on the remote host.

ID	Name	Product	Family	Severity
72848	AIX 6.1 TL 6 : bos.net.tcp.client (U849877)	Nessus	AIX Local Security Checks	high
72847	AIX 6.1 TL 5 : bos.net.tcp.client (U849815)	Nessus	AIX Local Security Checks	high
72846	AIX 7.1 TL 1 : bos.net.tcp.client (U849490)	Nessus	AIX Local Security Checks	high
72845	AIX 7.1 : bos.net.tcp.client (U848205)	Nessus	AIX Local Security Checks	high
72844	AIX 6.1 TL 7 : bos.net.tcp.client (U848193)	Nessus	AIX Local Security Checks	high
72842	AIX 5.3 TL 12 : bos.net.tcp.client (U846347)	Nessus	AIX Local Security Checks	high
72840	AIX 7.1 TL 1 : bos.net.tcp.client (U843468)	Nessus	AIX Local Security Checks	high
72839	AIX 6.1 TL 7 : bos.net.tcp.client (U841068)	Nessus	AIX Local Security Checks	high
59917	IBM AIX TCP Large Send Denial of Service Vulnerability	Nessus	General	high

Detections

Analytics

CVE-2012-0194

high

Tenable Plugins

high

high

high

high

high

high

high

high

high