CVE-1999-0116

Description

Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood.

Affected products

• ibm / aix3.2.5 – 3.2.5
• ibm / aix4.1 – 4.1
• ibm / aix4.2 – 4.2
• ibm / sng2.1 – 2.1
• ibm / sng2.2 – 2.2

Exploits & proofs of concept

• exploit-dbTCP SYN - 'bang.c' Denial of Serviceby Nebunu

References

• MISChttp://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/136
• VENDOR_ADVISORYftp://patches.sgi.com/support/free/security/advisories/19961202-01-PX