RE: Re: Recent bugtraq postings

[Rich Duzenbury <rduz-midrange@xxxxxxxxxxxxxxxxxxx>]

On Mon, 2005-04-25 at 14:05 -0500, Scott Klement wrote:

> However, the bugtraq posting isn't accurate, either.  First of all this 
> isn't a vulnerability in the iSeries. It doesn't compromise the iSeries at 
> all, only your PC. It's the PC software that's insecure, not the iSeries. 
> Secondly, it's not true of all emulation software (despite the claim to 
> the contrary!)

Right, that's what I thought right away.  Certainly not *ALL*.  So, I
fired up my trusty mochasoft v 7.2, and logged in.

Strpco 
strppcmd PCCMD('C:\WINDOWS\NOTEPAD.EXE') 

And I'll be darned if a notepad window didn't come right up.

Now, this machine has had client access loaded on it before, so I don't
know if it's a remnant of CA or if it is a part of mochasoft.

Either way, it certainly was something I was not aware of, and I'm not
really very pleased about.


--
Regards,
Rich

Current Conditions in Des Moines, IA
Overcast
Temp 55.4F
Winds out of the North at 28, gusting to 40mph