Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!uwm.edu!linac!att!cbfsb!cbnewsb.cb.att.com!marz
From: marz@cbnewsb.cb.att.com (martin.zam)
Newsgroups: comp.unix.sysv386
Subject: Re: SECURITY BUG IN INTERACTIVE UNIX SYSV386
Keywords: security bug
Message-ID: <1991Feb28.223835.4114@cbfsb.att.com>
Date: 28 Feb 91 22:38:35 GMT
References: <goBeX10w163w@aegis.or.jp> <1991Feb15.161201.18164@nstar.rn.com> <1991Feb19.214702.7093@ism.isc.com>
Sender: news@cbfsb.att.com
Organization: AT&T Bell Laboratories
Lines: 49

>Sender: Marty Stewart
>Reply-To: martys@ism.isc.com
>Organization: Interactive Systems Corp., Santa Monica, CA
>Lines: 22
>
>
>	This is mail to address the suggestions that INTERACTIVE either post
>the security hole fix to the net or put it on a ftp site where it can be
>picked up by users.
>
>	Under the AT&T licensing agreement, INTERACTIVE cannot post AT&T
>code to a site where any user can pick it up.  We are under the obligation
>to make sure only AT&T licensed users receive binaries that have portions of
>AT&T code in them.  The fixes for the security hole are in os.o and as such,
>the code cannot be put in a public area.  Another reason for not posting to
>the net is that the os.o is quite large and will take up unnecessary band-
>width at sites that do not need the INTERACTIVE fix.
>
>	As an alternative to calling support, please send mail to
>martys@ism.isc.com and I will see to it that users are sent a fix as soon as
>support is given the fix.  I will need an address, the version of software
>that you are running and your 2.0.2 or 2.2 serial number.  INTERACTIVE
>apologizes for any inconveniences this may cause users.
>
>Marty C. Stewart
>Support Team Leader
>INTERACTIVE Systems Corp.
>
>
Why don't you post a list of bugs that you do have a fix for?!?! 
My luck has been about the same as everybody else's at getting things
fixed, but I would like to have a FULLY FUNCTIONAL system without
having to weed out and isolate every damn bug in this system myself.

I am no happier than the rest of the netters who have complained, I just
haven't been as vocal.  

In addition, any docs that have been updated for my release of ISC should
be made available as well.  I paid handsomely for my complete ISC license
and I think support should reflect the price I paid.  Nothing installed
and just worked!  Nothing!  Anybody out there get their mouse to work
properly with X windows without pain?  Everything was painful, and calling
for tech support is downright degrading.

Anybody got Kodak's address?

						My Opinions,
						Martin Zam
						(201)564-2554