Do scanning software bugs (the kind that crash a whole system) count as vulnerabilities... I found a bug in ISS System Scanner where if a certain AIX patch (only in HACMP clustered systems) isn't applied it brings down the whole system. Thanks, Dan.Creed@xxxxxxxxxxxxx