Oninit cdi / Archive
Talk to an expert →

Re: IDS 11.50.FC9W1 on AIX

Posted in 2011

Topics: Security, Permissions & Auditing, Platform-Specific Issues

rotor — — source: IIUG Forums & Mailing Lists

We've founf a criminal bug in this version - it allows to connect without password. Simply want to warn the community to don't use it...

↪ replying to rotor
rotor — — source: IIUG Forums & Mailing Lists

APAR number is IC80345.

↪ replying to rotor
Fernando Nunes — — source: IIUG Forums & Mailing Lists

Thanks a lot. It looks as it's AIX specific (n any case, a severe problem of course. That version should not be available to customers) Regards. On Mon, Dec 12, 2011 at 1:14 PM, rotor <rotor@navigator.lv> wrote: > APAR number is IC80345. > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > -- Fernando Nunes Portugal http://informix-technology.blogspot.com My email works... but I don't check it frequently... --00148537ab8cd8148404b3e51867

↪ replying to rotor
Jonathan Leffler — — source: IIUG Forums & Mailing Lists

On Mon, Dec 12, 2011 at 04:21, rotor <rotor@navigator.lv> wrote: > We've found a criminal bug in this version - it allows to connect without > password. Simply want to warn the community to don't use it... > > APAR number is IC80345. > IBM was notified of this last week, investigated it, and validated it. The bug is only in the 11.50.UC9W1 and 11.50.FC9W1 fix packs (32-bit and 64-bit) for AIX; it is not in 11.50.xC9; it is not in 11.70; it is not applicable to any other platform. It relates to the way AIX handles shadow passwords, which is slightly different from other systems. The PID for AIX was withdrawn last week and no-one should be able to download it any more. Customers who have installed that PID should contact IBM Technical Support. The obvious workaround is to revert to the 11.50.xC9 release, but discuss alternatives with IBM Technical Support. IIRC, the PID was released in mid-October. -- Jonathan Leffler <jonathan.leffler@gmail.com> #include <disclaimer.h> Guardian of DBD::Informix - v2011.0612 - http://dbi.perl.org "Blessed are we who can laugh at ourselves, for we shall never cease to be amused." --90e6ba2121bd2636ef04b3e69dc2

↪ replying to Jonathan Leffler
rotor — — source: IIUG Forums & Mailing Lists

Just for information. The problem resolved in 11.50.FC9W1X1.

Glossary