Z/VM FTP SERVER SHOULD SUPPORT FEAT COMMAND
APAR Identifier ...... PH01905 Last Changed ........ 18/10/01
Z/VM FTP SERVER SHOULD SUPPORT FEAT COMMAND
Symptom ...... IN INCOROUT Status ........... CLOSED PER
Severity ................... 4 Date Closed ......... 18/10/01
Component .......... 5735FAL00 Duplicate of ........
Reported Release ......... 640 Fixed Release ............ 999
Component Name TCP/IP FOR Z/VM Special Notice
Current Target Date .. Flags
SCP ...................
Platform ............
Status Detail: SHIPMENT - Packaged solution is available for
shipment.
PE PTF List:
PTF List:
Release 640 : UI58837 not available yet
Release 710 : UI58838 not available yet
Parent APAR:
Child APAR list:
ERROR DESCRIPTION:
The z/VM FTP server should support the FEAT command along with
the OPTS command as documented by RFC 2389. Customers have
security scanners that are failing because of the lack of
support for the FEAT command.
LOCAL FIX:
PROBLEM SUMMARY:
****************************************************************
* USERS AFFECTED: All users of z/VM FTP server *
****************************************************************
* PROBLEM DESCRIPTION: *
****************************************************************
* RECOMMENDATION: APPLY PTF *
****************************************************************
Many security scanners rely on the FTP FEAT command when
connecting to an FTP server. The z/VM FTP server does
not support the FEAT command which can cause it to fail
some security scans even when the server itself is secure.
PROBLEM CONCLUSION:
This APAR adds support to the z/VM FTP server for the FEAT
and OPTS commands as documented by RFC 2389.
TEMPORARY FIX:
COMMENTS:
MODULES/MACROS:
FTSCMD FTSEVEN FTSRVCO FTSRVPA FTSUTIL FTSVMSUB MSFTP
SRLS:
NONE
RTN CODES:
CIRCUMVENTION:
MESSAGE TO SUBMITTER: