Re: IDS 11.50.FC9W1 on AIX
Rotor warned that IDS 11.50.FC9W1 on AIX allowed connections without a password and gave APAR IC80345. Jonathan Leffler said IBM validated it: only the 11.50.UC9W1/FC9W1 AIX fix packs are affected (shadow password handling), not 11.50.xC9, 11.70 or other platforms. The download was withdrawn; affected customers should contact IBM support or revert to xC9. Rotor said it was resolved in 11.50.FC9W1X1.
Auto-generated by Claude from the posts below — may be imperfect; read the full thread.
We've founf a criminal bug in this version - it allows to connect without password. Simply want to warn the community to don't use it...
APAR number is IC80345.
Thanks a lot. It looks as it's AIX specific (n any case, a severe problem of course. That version should not be available to customers) Regards. On Mon, Dec 12, 2011 at 1:14 PM, rotor <rotor@navigator.lv> wrote: > APAR number is IC80345. > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > -- Fernando Nunes Portugal http://informix-technology.blogspot.com My email works... but I don't check it frequently... --00148537ab8cd8148404b3e51867
On Mon, Dec 12, 2011 at 04:21, rotor <rotor@navigator.lv> wrote: > We've found a criminal bug in this version - it allows to connect without > password. Simply want to warn the community to don't use it... > > APAR number is IC80345. > IBM was notified of this last week, investigated it, and validated it. The bug is only in the 11.50.UC9W1 and 11.50.FC9W1 fix packs (32-bit and 64-bit) for AIX; it is not in 11.50.xC9; it is not in 11.70; it is not applicable to any other platform. It relates to the way AIX handles shadow passwords, which is slightly different from other systems. The PID for AIX was withdrawn last week and no-one should be able to download it any more. Customers who have installed that PID should contact IBM Technical Support. The obvious workaround is to revert to the 11.50.xC9 release, but discuss alternatives with IBM Technical Support. IIRC, the PID was released in mid-October. -- Jonathan Leffler <jonathan.leffler@gmail.com> #include <disclaimer.h> Guardian of DBD::Informix - v2011.0612 - http://dbi.perl.org "Blessed are we who can laugh at ourselves, for we shall never cease to be amused." --90e6ba2121bd2636ef04b3e69dc2
Just for information. The problem resolved in 11.50.FC9W1X1.