[Top] [All Lists]

RE: [nv-l] After 6.03 patch install

To: "'nv-l@lists.tivoli.com'" <nv-l@lists.tivoli.com>
Subject: RE: [nv-l] After 6.03 patch install
From: "Cavazos, David" <david.cavazos@tgslc.org>
Date: Mon, 4 Mar 2002 12:22:03 -0600
I to was surprised to see this happen when I upgraded to 7.1.  This was
changed as a security precaution to prevent a malicious person from
inserting a command into the DataStream by sending a command in a trap.
This is a not a bug but behavior by design.

I was using batch files on our Windows 2000 system to parse data and open
tickets in our problem management system before the change.  However, since
text processing is almost non-existent in the dos shell, I now use a VB
Script parser to test and format the data before passing it to the problem
management system.

AIX and Unix have powerful scripting tools which can do the same probably
more easily than VB Script in windows.

David Cavazos MCSE, MCDBA
Database Engineer
Texas Guaranteed Student Loan Corp.
(512) 219-4977
-----Original Message-----
From: reamd@Nationwide.com [mailto:reamd@Nationwide.com]
Sent: Monday, March 04, 2002 11:46 AM
To: nv-l@lists.tivoli.com
Subject: [nv-l] After 6.03 patch install

Hi All,
          I recently in stalled the 6.03 patch and have came across a
problem since the install.We currently have scripts defined to execute when
certain traps are received such as interface up.down traps, and SNMP
Collection threshold traps.  Netview is configured to pass paramenters to
these scripts such as
/usr/local/nwi/scripts/ifthresh $1 $2 "$3" $4 $5.  Prior to the patch, all
parameters passed through in clear text, included non alpha-numeric
characters.  After the 6.0.3 upgrade patch was applied, all non
alpha-numeric characters are being preceded by a "\" character.  For
example, if $1 is the resource name and it = "a-n-aa-drt01", then the
paramneter getting passed to the script is "a\-n\-aa\-drt01".  This is
casuing problems in the scripts. Any Idea's?

AIX 4.3.3
Netview 6.03

Thanks, Dave

To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
For additional commands, e-mail: nv-l-help@lists.tivoli.com

This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)

<Prev in Thread] Current Thread [Next in Thread>

Archive operated by Skills 1st Ltd

See also: The NetView Web