RE: More PTFs to fix sign-on password exposure

Is there a PTf for V3R7???

Mark Allen
IS Manager
Kelly's Kids
markallen@kellyskids.com

-----Original Message-----
From: owner-midrange-l@midrange.com
[mailto:owner-midrange-l@midrange.com]On Behalf Of edfishel@us.ibm.com
Sent: Thursday, June 15, 2000 10:40 AM
To: MIDRANGE-L@midrange.com; MI400@midrange.com
Subject: More PTFs to fix sign-on password exposure



I informed you on Monday that IBM had decided to provide fixes for several
non-supported releases.  Those PTFs are now available. Here is the complete
set of PTFs to fix this problem on both supported and non-supported
releases. The V3R2 PTF number is SF62947, the V4R1 PTF number is SF62944,
the V4R1M4 PTF number is SF62945, the V4R2 PTF number is SF62946, V4R3 PTF
number is SF62894, the V4R4 PTF is SF62895, and the V4R5 PTF is SF62896.

Normally just applying the PTF to the system is not sufficient to
immediately fix the problem. The PTF must be activated to remove the
exposure. It can be activated by terminating and then restarting all
subsystems that perform interactive work. It can also be activated by doing
an IPL. Because of other PTFs in the supersede chain, the PTFs for V3R2 and
V4R2 are delayed PTFs that will require an IPL to apply the PTF. Therefore,
you do not need to follow the above activation instructions for V3R2 and
V4R2.

This password exposure has received a great deal of attention and it is
likely that several people know how to use it. Therefore, since your
passwords may have been compromised, after applying and activating the fix,
you may wish to change the passwords on your systems.

Ed Fishel
IBM Rochester


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---