OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Andrew Leonard (andygeospiza.com)
Date: Tue Sep 25 2001 - 13:08:23 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Quoting "Eoin D. Fleming" <rtfmeircom.net>:

    > It appears that IBM's HACMP 4.4 clustering software can be induced to
    > fail simply by port scanning clustered machines, has anyone come accross
    > this vulnerability and is there a workaround?

    I have not seen this particular vulnerability, having never used HACMP.
    However, I did see a very similar thing on Compaq's TruCluster product two jobs
    ago: If port-scanned from a machine without a PTR record in DNS, the cluster
    would develop split-brain syndrome. At management's request, this was kept
    quiet (as in, not posted here), and we worked with Compaq to develop a patch.

    This was back in 1999, and applied to TruCluster 1.5 (I think...). I never saw
    an advisory about this from Compaq, so as far as I know this was quietly rolled
    into TruCluster updates.

    cheers:
    andy 

    --
Andrew Leonard
Geospiza, Inc.
3939 Leary Way NW
Seattle, WA 98107
(206) 633-4403; (206) 633-4415 (fax)