IBM WebSphere Application Server 7.0 Fix Pack 29 Missing

We contract out some benevolent hacking and they use a product called
Qualys. Currently their top concern on our machine is the subject line
above.
Now, I know that not only do I need to order that group ptf but I also
have to run it through some scripts to get WAS to actually make use of it.
So I will get that done.

I am just letting you know that not being on this fix pack is evidently a
cause for concern. However, unlike many of the other exploits currently
available on my system they do not publish any actual CVE numbers.
Apparently CVE numbers really get IBM's attention. Because IBM's current
level of bind garners several and IBM didn't care that their bind level
was pointed out to be exploitable. That is until I listed several
specific CVE numbers and they jumped to attention like I just walked into
the room wearing the Congressional Medal of Honor.


Rob Berendt