Re: AS400 user password

[edfishel@xxxxxxxxxx]

>> I cannot prove that this problem was not reported to IBM before last
week.
>> I do know that if it was reported, that report never made it to the
people
>> who care about AS/400 security.
>
>Is there an open email address similar to say the CERT email address
where,
>should we find anymore holes, that we can send alerts to ?
>
>--phil

Phil,

It is best to use the normal support channels. Anyone can report errors
free of charge via ECS or via www.as400service.com and then selecting
problem reporting. Users must first register at the Web site and need a
customer number and machine serial number. Users are also free to report
these problems through their business partners which many times also have a
support contract.

Be sure to clearly state that the problem is a security problem and your
opinion of its severity.

Also at the Web site, users can select PTF Maintenance and view/search for
all HIPER and/or data Integrity PTFs for a particular release. User's
should also able to order or download PTFs from this Web site.


Ed Fishel


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---