RE: iSeries buffer overflow immunity?

["Goodbar, Loyd (ETS - Water Valley)" <LGoodbar@xxxxxxxxxxxxxx>]

Don't necessarily assume since your custom socket server isn't "standard"
that it can't be hacked. My understanding is the Samba group reverse
engineered Microsoft's SMB protocol when developing Samba. Then again, they
had hundreds (thousands?) of samples of SMB traffic to work with...

Loyd Goodbar
Senior programmer/analyst
BorgWarner
E/TS Water Valley
662-473-5713
-----Original Message-----
From: Chris Bipes [mailto:chris.bipes@xxxxxxxxxxxxxxx] 
Sent: Monday, November 08, 2004 14:36
To: 'Midrange Systems Technical Discussion'
Subject: RE: iSeries buffer overflow immunity?

Well in order to do any of this, you need to get a hold of the application,
reverse engineer it, identify the weakness, then build the program to
attach.  Easy to do with cheap MS applications that are generally available.
But to do so I the iSeries will take a lot of money and effort.  Yes it can
be done.  If I want to attach the Apache server on the iSeries, I could
start with the open source for Apache on my windows platform.  But will the
same attach on the same program work on the iSeries?  Now for my custom
socket server that does not reside on any computer outside of the
organization, well it would be more difficult to attach since you know
nothing about my application and cannot get the program object or source to
reverse engineer.

Chris Bipes