Re: Vulnerability scanning

[Rob Berendt <robertowenberendt@xxxxxxxxx>]

I am not using that particular service.  I am using others.  Sometimes the
scanning services will report something like "you are using DNS Bind level
such and such therefore you are susceptible to yada yada" and the IBM i
team would counter but we patched that manually instead of going to the new
bind level.  Really funny when we had IBM scanning team and IBM i team and
us stuck in the middle.  I don't blame the scanning services.  After all,
if the CVE was that a denial of service would bring the system to it's
knees do you really want them testing that and crashing your system, or
simply stopping at "you're at this old level"?  Me, I'm fine with the
latter.

See also:  https://www.ibm.com/support/pages/bulletin/
Enter your CVE in here and see what IBM has to say about it.

On Tue, Aug 13, 2024 at 11:52 AM DEnglander--- via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

> Does anyone use the Nessus vulnerability scanning software?
>
> We have scanned our IBM i servers and the software is detecting a TCP/IP
> vulnerability. I have created a case with IBM and they said that the
> TCP/IP stack the vulnerability is referencing is not used by IBM.
>
> Has anyone else experienced this?
>
> Thank you
>
> Doug
>
>
>
> "CONFIDENTIALITY NOTICE:  This e-mail transmission (and/or the attachments
> accompanying it) contain confidential information belonging to the sender.
> The information is intended only for the use of the intended recipient.  If
> you are not the intended recipient, you are hereby notified that any
> disclosure, copying, distribution or the taking of any action in reliance
> on the contents of the information is strictly prohibited.  Any
> unauthorized interception of this transmission is illegal under the law.
> If you have received this transmission in error, please promptly notify the
> sender by reply e-mail, and then destroy all copies of the transmission."
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.