Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Penetration Testing: Re: Dangerous in using nmap for AS/400 730 machine configured with 3 ASPs?

Re: Dangerous in using nmap for AS/400 730 machine configured with 3 ASPs?

From: pand0ra <pand0ra.usa_at_gmail.com>
Date: Fri, 16 May 2008 15:46:08 -0600

Correction, PTF not PTP.

On Fri, May 16, 2008 at 11:08 AM, pand0ra <pand0ra.usa_at_gmail.com> wrote:
> I think there is a PTP out there that talks about that issue. Some
> version of the 400 are vulnerable to a DoS from a normal port scan.
>
> On Thu, May 15, 2008 at 8:46 PM, Brahnda A. Eleazar
> <brahnda.e_at_hermisconsulting.com> wrote:
>> Peace all,
>>
>> I am wondering whether this is related or not.
>> I was in the middle of beginning a pentest activity for a network segment containing quite a number of AS400 (Production).
>> I started with a simple nmap first to see what I am facing.
>> My command was (IPs are masked) "nmap -sV -vv -p 8470-8476 -o firsttry_port.nmap xxx.xxx.xxx.0/24"
>> This lasted for about 15 minutes.
>>
>> After about 2 hours later, 2 out of 50+ identifiable machines started having problems.
>> They became very slow.
>> Those two machines are using ASP (Auxiliary Storage Pools), 1 ASP on the 1st machine and 2 ASPs on the 2nd.
>>
>> I just want to get more information whether my nmap did anything "bad"? :)
>>
>> Thanks and Regards,
>> =adley=
>>
>>
>> ------------------------------------------------------------------------
>> This list is sponsored by: Cenzic
>>
>> Top 5 Common Mistakes
>> in Securing Web Applications
>> Find out now! Get Webinar Recording and PPT Slides
>>
>> www.cenzic.com/landing/securityfocus/hackinar
>> ------------------------------------------------------------------------
>>
>>
>

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes
in Securing Web Applications
Find out now! Get Webinar Recording and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------
Received on May 16 2008

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos