My manager got the same call the day before xmas from our rep ( at IBM's insistance ). I too was not ( still am not ) registered for this site. BUT I am registered for red alerts. IF this was that serious should that not be the vehicle to get this info out. I do not want to register somewhere else for something that already is in place. I was able to get enough info from our rep to find out that one apar dealt with the HTTP server and the other two dealt with Tivoli Netview. At the time, the day after xmas, the PTF's did NOT exist at the www.ibm.com/support site. I have not looked since as we do not run either of those components but found it strange I could not successfully search for the PTF's. From the limited viewing of the Security portal, I did not see much in value.

On 1/3/2013 3:44 PM, Clifford McNeill wrote:
I received a phone call from my sales rep (at IBM's insistence) stressing the 
severity of this and 2 other APARs.  I suspect that others have received 
similar phone calls.  I am not registered (yet) for the 'System z Security 
Portal' but I suspect the APAR's details are in there.
Cliff McNeill
Date: Thu, 3 Jan 2013 13:38:14 -0600
From: robert.carba...@officedepot.com
Subject: Security vulnerability in IBM HTTP Server for z/OS Version 5.3 
(PM79239)
To: IBM-MAIN@LISTSERV.UA.EDU

Does anyone have any thoughts on this?

Here is the link explaining the issue:
https://www-304.ibm.com/support/docview.wss?&uid=swg21620945

I did some searching but can't seem to really find details about the exploit.

How serious is this?

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
                                        
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu

"To make an apple pie from scratch, you must first invent the universe."

Carl Sagan

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to