SECURITY BUG ON INFORMIX - VERY VERY DANGEROUS!!!

From: <rodolfosc_at_analista.mailbr.com.br>
Date: Mon, 02 Aug 1999 15:50:48 -0500 (EST)

Hi managers,






         I have here a really BIG problem...



         We have some servers using TruCluster and Informix, and we use

setnet32 (an informix tool) to access directly our databases. The

problem is:

         Setnet allow everybody to access all our database with

no password! Everybody can access the database as any other user

including the user informix!



         The solution that was answered to us was to remove the "+" from

 hosts.equiv, and put "-informix". Doing this we had other two problems:



            * Removing the "+" we removed the access from anyone into

the database

            * Putting the "-informix" all ours software's (based on

informix) stopped responding because our database is distributed between

our servers...



         We don't have any other answer!!! And we need someone...





         Thanks in advance...



            Rodolfo.















MailBR - O e-mail do Brasil -- http://www.mailbr.com.br
Faça já o seu. É gratuito!!!
Received on Mon Aug 02 1999 - 20:54:05 NZST

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:39 NZDT