Vulnerability 3358, "IBM HACMP Port Scan Denial of Service Vulnerability"

["Michael S Soukup" <soukup () us ibm com>]

-----BEGIN PGP SIGNED MESSAGE-----

Hi, folks --

Regarding BUGTRAQ Vulnerability 3358, "IBM HACMP Port Scan Denial of
Service Vulnerability", and the various BUGTRAQ postings on this subject,
I want to let everyone know that the problem has been fixed for some time now,
and tested fixes ("patches") are available. The problem originated in a bug
in snmpd.

For those using AIX 4.3, upgrading to Maintenance Level 7 will fix the
problem.

For AIX 4.3.3, the APAR to apply is IY17630.

For those using AIX 5.1, apply APAR IY20943.

These APARs can be found and downloaded by starting at the website:

            http://techsupport.services.ibm.com/rs6000/fixes


Kind regards to all!

Mike Soukup


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
Michael Soukup
Advisory Software Engineer
AIX Security and Performance Tools Dept. (7T/UD3A)
IBM Austin

Tel: (512) 838.0595
//////////////////////////////////////////////////


-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.2

iQCVAwUBO7no/wsPbaL1YgqvAQH4jQP/c8OnimK0BYJfvH9rRHAC6F8Z4Jybt7tc
iVMF0ffPW0KA/pZDrY7xS+zUUr2gb+wmNEdVVbTVoGrjRw3jO7PKTTv3jIydHTUe
Ko8MopPoNPJ0uKJULHyevzJFMKkJEVLNamghprHyJzvatfOYbdmjRQtnxynOVKie
743yPRdkGV4=
=Tfom
-----END PGP SIGNATURE-----