bugtraq June 2008 archive
Main Archive Page > Month Archives  > bugtraq archives
bugtraq: Re: AS/400 Vulnerabilities

Re: AS/400 Vulnerabilities

From: Marco Ivaldi <raptor_at_nospam>
Date: Mon Jun 16 2008 - 07:55:57 GMT
To: bugtraq@securityfocus.com


Hello Bugtraq,

On Fri, 13 Jun 2008, security curmudgeon wrote:

> I would guess there is little research being done on them. The odds of a
> box falling over due to a few malformed TCP packets, but being resistant
> or not vulnerable to more complex attacks seems pretty far fetched.
> While this vendor and technology is widely deployed, it isn't a sexy
> target for research.

Speaking of AS/400 security research, I'd like to point out the following resources: http://seclists.org/pen-test/2008/Feb/0083.html http://www.venera.com/downloads.htm http://www.venera.com/order.htm http://www.security-database.com/toolswatch/AS-400-Auditing-Framework-Beta.html

Cheers, -- Marco Ivaldi, OPST Red Team Coordinator Data Security Division @ Mediaservice.net Srl http://mediaservice.net/