RE: SNMP Issue for iSeries -- from IBM

[Buck Calabro <Buck.Calabro@xxxxxxxxxxxx>]

Bob Cancilla posted this on the IGNITe list a few moments ago...

>Here is the response re the recent CERT advisory
>on SNMP that we got from IBM.  While I cannot
>reveal my source, you can be assured that
>this is one of the single most authorative
>sources in the iSeries organization.
>
>*****************  from IBM ********************************
>
>Both the iSeries SNMP Agent and Trap Manager are impacted,
>however the exposure is minimal.    There have not been any
>security exposures found.
>The tests referenced in the CERT can cause a denial of service
>to the SNMP service only.  It is also important to understand
>that SNMP is not something that should typically be running
>on any system that is accessible to the Internet or other
>public network, therefore reducing this DOS exposure to
>internal machines only.
>
>We are working on the fixes now.  We will be providing PTFs
>for V4R5 and V5R1 in the next several weeks.
>
>****************  End **************************************