Re: XWindows service on IBM i

On 4/21/2016 2:55 PM, Justin Dearing wrote:

Pretty rexec is part of rsh, unencrypted ssh. Don't use it. Password
transmitted in plain text.

This is a shut it of and see if people complain kind of thing because

it's

unpopular and insecure. I don't blame your auditors getting upset at

this.

CVE-1999-0526
CVSS v2 Base Score: 10.0 HIGH
See also: http://www.kb.cert.org/vuls/id/704969

I might get upset about rexec too, but the link points to X11 /
XWindows. Rexec isn't X11, is it? Is the CVE some confusion over port
numbers?

--
--buck

Visit wiki.midrange.com and register for an account. Edit a page that
helps you, and because it's public, you'll help someone else, too!

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.