Bugtraq mailing list archives

Re: AS/400


From: rrpermeh () RCONNECT COM (Ryan Permeh)
Date: Wed, 5 May 1999 08:52:42 -0500


Yeah, i found this a while back on non domino smtp daemons on as400's also.
it's a somewhat simple solution to fix (just turn the SMTP service back
on), but SMTP can be shut off across the network.  i know this worked on
as400 3.X, i haven't had a chance to test on any of the domino types or the
4.X OS levels

At 08:53 AM 5/4/99 +0200, you wrote:
Hello all.

I played around with smtp on a as/400+domino machine and found two
obvious bugs, then notified IBM, revieved a ptf, then posted here.

1:  telnet (host) 25, then start feeding chars. After about 200-300
chars the smtp-subsystem will die, needing to be restarted.

2:  change your replyto-address and fromaddress to an non-existing
user/domain then mail to an non-existing user on the 400/domino. This
will cause the mail to loop endlessly between the smtp-subsystem and the
domino subsystem.

This is for general knowledge only, trying to "force" people with
400/domino to react and secure their machines.

Sincerely,
---
(put your favourite signature here)

Ryan R Permeh           E-MAIL: rrpermeh () rconnect com   rrpermeh () resinc net    
IS Engineer                     WEB   : http://www.rconnect.com         http://www.response.net
Rural Connections /   HELP  : help () rconnect com      
Response Inc.           FAQ   : http://www.rconnect.com/help   
                                SALES : sales () rconnect com           sales () resinc net
------------------------------------------------------------
120 First Street NE   PHONE : (507) 281-5005          
Rochester, MN 55906   FAX   : (507) 281-9272      
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: PGP for Personal Privacy 5.5.2
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=pGLY
-----END PGP PUBLIC KEY BLOCK-----



Current thread: