Re: AS/400 Vulnerabilities

2008-06-16 Thread Marco Ivaldi
Hello Bugtraq, On Fri, 13 Jun 2008, security curmudgeon wrote: I would guess there is little research being done on them. The odds of a box falling over due to a few malformed TCP packets, but being resistant or not vulnerable to more complex attacks seems pretty far fetched. While this

Re: AS/400 Vulnerabilities

2008-06-14 Thread security curmudgeon
. I'd be curious to see how many bug reports IBM has received on the port scan DoS. Given the lack of information about what versions or conditions are required for it to happen is why I said it is mostly anecdotal. : However, if you search for AS/400 vulnerabilities, you find only about a : dozen

AS/400 Vulnerabilities

2008-06-13 Thread Jon Kibler
screeches to a halt. Given that those boxes are so brittle to even simple network scans, it would seem that they would have to be full of exploitable vulnerabilities. If nothing else, a few custom packets should be able to DoS a box. However, if you search for AS/400 vulnerabilities, you find only

RE: AS/400 Vulnerabilities

2008-06-13 Thread Michael Wojcik
From: Jon Kibler [mailto:[EMAIL PROTECTED] Sent: Thursday, 12 June, 2008 14:54 To: bugtraq@securityfocus.com 2) Are the boxes really just unstable to malformed network data, but not exploitable? Exploiting data-handling vulnerabilities (as opposed to design vulnerabilities, like