Re: VIRUS Alert for the LIST

["Peter Dow" <pcdow@xxxxxxxxx>]

So far everyone has focused on viruses that would propagate via e-mail or by
users picking it up via the IFS. It seems to me it would be possible to go
directly AS400-to-AS400 using FTP. Just put a save file containing the
virus, restore the virus, and run it. The first thing the virus does it FTP
itself to any other machines listed in the host table, restore and execute.
THEN trash the current AS/400, which as far as I'm concerned does not have
to zap QSYS to be devastating to a production machine. If any production
data is deleted, or even modified (a far more insidious problem).

Of course it would need sufficent authority on the remote systems, but if
the inital user is QSECOFR and the same password is used on AS400's on the
LAN...

Peter Dow
Dow Software Services, Inc.
909 425-0194 voice
909 425-0196 fax


> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
david@midrange.com
> +---


__________________________________________________
Do You Yahoo!?
Talk to your friends online with Yahoo! Messenger.
http://messenger.yahoo.com

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---