On Tue, 10 Sep 2002 01:12, you wrote:
> And so who reports these problems?  There are *far* fewer investigators
> than there are for the ubiquitous desktop systems.  Yet my gut feeling
> is that there are plenty of opportunities left for the inquisitive
> ne'er-do-well.


Reminds me....

Since June '94 I've had two six-month terms on MVS/OS390 systems.

First term I managed to crash an initiator. It was repeatable.

I was testing compilers (COBOL, PL/1 and maybe HLASM). The compiler used all
the region available to it. INIT crashed, I think w9th SA0A (but it was a few
years ago).

It was on an IBM-owned system, and nobody seemed very interested in having it
fixed.

Second. FTP to OS/290's FTPD from a Windows box:

ftp
> put thisfile 'groupx.my.file'

I was running ftp in a script. It would probably have been easy enough to pass
the script around (were I more adept at cracking NT) and having everyone do
it when the logged in.

Crashes ftpd. Security problem? Could be. DoS/ Certainly.

I found these problems in the normal course of my work which was _NOT_ to look
for OS problems.





--
Cheers
John Summerfield


Microsoft's most solid OS: http://www.geocities.com/rcwoolley/
Join the "Linux Support by Small Businesses" list at
http://mail.computerdatasafe.com.au/mailman/listinfo/lssb

Reply via email to