OA38973: HTTP: KDH RESPONDING TO NONEXISTENT WEB PAGE

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• PROBLEM DESCRIPTION:
  
  the ITM web server responds to nonexistent web page requests
  with the default return page.  This can be viewed as a security
  exposure.
  
  
  RECREATE INSTRUCTIONS:
  This can be demonstrated by attempting to attach to sites such
  as
  http://servername:PORT/kdh/bigBanana
  http://servername:PORT/kdh/hotDogs
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All ITMS/ENGINE users.                       *
  ****************************************************************
  * PROBLEM DESCRIPTION: HTTP: KDH RESPONDING TO NONEXISTENT WEB *
  *                      PAGE.                                   *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF.                               *
  ****************************************************************
  The IBM Tivoli Monitoring Tivoli Enterprise Basic Services
  (TEBS) web server responds to nonexistent web page requests
  with the default return page.  This can be viewed as a
  security exposure.
  

Problem conclusion

• Code changed to recognize nonexistent web pages and return
  the standard HTTP 404 NOT FOUND status code.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IV03430

• APAR is sysrouted TO one or more of the following:

Modules/Macros

•    KDELIB
  

Fix information

• Fixed component name

  CT/ENGINE

• Fixed component ID

  5608A41CE

Applicable component levels

• R623 PSY UA64470

     UP12/03/09 P F203

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.