Re: AS/400 Vulnerabilities

2008-06-16 Thread Marco Ivaldi
Hello Bugtraq, On Fri, 13 Jun 2008, security curmudgeon wrote: I would guess there is little research being done on them. The odds of a box falling over due to a few malformed TCP packets, but being resistant or not vulnerable to more complex attacks seems pretty far fetched. While this

Re: AS/400 Vulnerabilities

2008-06-14 Thread security curmudgeon
: Have you ever nmap-ed a network with AS/400s? If you have, you probably : know that doing so will, in at least half the cases, either crash the : box, hang up one or more services, or really confuse the IP stack to the : point that the box almost screeches to a halt. This is frequently

RE: AS/400 Vulnerabilities

2008-06-13 Thread Michael Wojcik
From: Jon Kibler [mailto:[EMAIL PROTECTED] Sent: Thursday, 12 June, 2008 14:54 To: bugtraq@securityfocus.com 2) Are the boxes really just unstable to malformed network data, but not exploitable? Exploiting data-handling vulnerabilities (as opposed to design vulnerabilities, like