Re: SNMP Issue for iSeries -- from IBM

as I noted in a previous post, do not do a STRTCPSVR *ALL
if you don't want SNMP running.
jim
----- Original Message -----
From: "Buck Calabro" <Buck.Calabro@commsoft.net>
To: <midrange-l@midrange.com>
Sent: Tuesday, February 19, 2002 11:29 AM
Subject: RE: SNMP Issue for iSeries -- from IBM


> Bob Cancilla posted this on the IGNITe list a few moments ago...
>
> >Here is the response re the recent CERT advisory
> >on SNMP that we got from IBM.  While I cannot
> >reveal my source, you can be assured that
> >this is one of the single most authorative
> >sources in the iSeries organization.
> >
> >*****************  from IBM ********************************
> >
> >Both the iSeries SNMP Agent and Trap Manager are impacted,
> >however the exposure is minimal.    There have not been any
> >security exposures found.
> >The tests referenced in the CERT can cause a denial of service
> >to the SNMP service only.  It is also important to understand
> >that SNMP is not something that should typically be running
> >on any system that is accessible to the Internet or other
> >public network, therefore reducing this DOS exposure to
> >internal machines only.
> >
> >We are working on the fixes now.  We will be providing PTFs
> >for V4R5 and V5R1 in the next several weeks.
> >
> >****************  End **************************************
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>