Re: VIRUS Alert for the LIST

[Ray Peterson <rpeterso@xxxxxxxxxxxxxx>]

David Gibbs wrote:

> No, a file on the IFS is *NOT* immune from viral infection ... Functionally
> the AS/400 is immune from the effects of a virus, due to it's architecture,
> but a PC file is still a PC file.  There's nothing inherent in the AS/400
> to protect an IFS file from infection.  In short: The AS/400 is actually
> quite vulnerable to viruses ... but it can only carry the problem, not be
> affected by it.

This was true of your fathers AS/400, but I'm not as confident as some in
today's AS/400.  Not that the AS/400 itself is any less immune.  However,
with the advent of the IFS, Operations Navigator, administration via a Java
web browser, Domino, etc.,  to some extent the AS/400 is only as protected
as the weakest link - in each of these cases a "PC" architecture, not an AS/400
architecture.  And often a PC program executing on the PC but updating
AS/400 objects.  I wouldn't pretend to have the skills to be able to create
such a virus, trojan horse, or other malicious code.  But I do think we have
to consider the possibility, and indeed be prepared to defend against it.

Are the following examples a "stretch"?

Melisa was a microsoft mail system "virus".   Is Domino immune?

Could a "Trojan Horse" be created to attach itself to an OpsNavigator PC
program and harvest user ids and passwords? After all, OpsNav can create
and change user id's and object permissions.

Could OpsNav be modified to start IP servers you don't normally start - e.g. 
FTP?

Well you get the idea.  Am I way off base here, or is there something to be
concerned with?

Ray


--
Ray Peterson
WITC - Shell Lake
505 Pine Ridge Drive
Shell Lake  WI  54871
www.witc.tec.wi.us
715 468-2815


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---