RE: BugTraq Exploit for OS/400

This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
--
[ Picked text/plain from multipart/alternative ]
> Are we not all missing the point here??

> In order to use the use the System Request menu the user has
> signed on. They have a user ID and password. If this is an
> unauthorised person the system is already compromised.

I don't think I missed that point Syd, this is a quote from my first post on
this subject;

"The problem with this 'vulnerability' is that you need to actually be on
the machine to use it, although it's not quite the chicken & egg situation
that it first sounds like - it can help once you're on the system by making
life easier to determine which user profile(s) you *should* hijack to give
you more access rights."

--phil