Re: Mochasoft security hole

[Chuck Morehead <cbmorehead@xxxxxxxxxx>]

Gary,

Perhaps it is not the same device that is being varied back on.  Check the
device names.  I bet that it is a different virtual device that is being
used the second time.  This is not a MochaSoft issue, but a general telnet
issue.  Let me know if this is the problem and I can give you some guide
lines.

Chuck

----- Original Message -----
From: <glea@dextermag.com>
To: <MIDRANGE-L@midrange.com>
Sent: Wednesday, November 14, 2001 1:21 PM
Subject: Mochasoft security hole


>
>
> We are using Mochasoft for some of our access to the AS/400 both
internally and
> externally.  We have the system set up so that it will vary off the device
if
> the user keys the incorrect password three times.  We tried a little test
> yesterday and found that if the user selects "reset terminal" from the
"Edit"
> drop down menu the device will be varied back on and a signon screen will
> reappear!  This happens even if the systems administrator has varied off
the
> device manually.  Has anyone else had this experience and if so, how did
you
> deal with it?
>
> Gary Lea
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>