My manager got the same call the day before xmas from our rep ( at IBM's
insistance ). I too was not ( still am not ) registered for this site.
BUT I am registered for red alerts. IF this was that serious should that
not be the vehicle to get this info out. I do not want to register
somewhere else for something that already is in place. I was able to
get enough info from our rep to find out that one apar dealt with the
HTTP server and the other two dealt with Tivoli Netview. At the time,
the day after xmas, the PTF's did NOT exist at the www.ibm.com/support
site. I have not looked since as we do not run either of those
components but found it strange I could not successfully search for the
PTF's. From the limited viewing of the Security portal, I did not see
much in value.
On 1/3/2013 3:44 PM, Clifford McNeill wrote:
I received a phone call from my sales rep (at IBM's insistence) stressing the
severity of this and 2 other APARs. I suspect that others have received
similar phone calls. I am not registered (yet) for the 'System z Security
Portal' but I suspect the APAR's details are in there.
Cliff McNeill
Date: Thu, 3 Jan 2013 13:38:14 -0600
From: robert.carba...@officedepot.com
Subject: Security vulnerability in IBM HTTP Server for z/OS Version 5.3
(PM79239)
To: IBM-MAIN@LISTSERV.UA.EDU
Does anyone have any thoughts on this?
Here is the link explaining the issue:
https://www-304.ibm.com/support/docview.wss?&uid=swg21620945
I did some searching but can't seem to really find details about the exploit.
How serious is this?
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
--
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
b...@psu.edu
"To make an apple pie from scratch, you must first invent the universe."
Carl Sagan
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN