Re: Getpwnam bus error.. is this patched?

• Messages sorted by: [ date ][ thread ][ subject ][ author ]
• Next message: Jonas Stahre: "Re: Fun with devices [was: Re: /dev/tcx0 crashes SunOS 4.1.4 on"
• Previous message: Oliver Xymoron: "Re: Bug in majordomo"
• In reply to: Charles Howes: "Getpwnam bus error.. is this patched?"
• Next in thread: maximum entropy: "Re: SunOS 4.1.4 ftp serious bug"

>I'm a little behind in the patches.  This program dies on Solaris 2.5;
>is this already patched, or is it news that getpwnam() has an
>overflowable buffer?


Old news (similar patches exist for 2.5 and for x86 2.5 & 2.5.1)

Patch-ID# 103612-23
Keywords: security libc memory su getdate NIS+ libnsl nis_cachemgr rpc.nisd NIS+
Synopsis: SunOS 5.5.1: libc, libnsl, nis_cachemgr and rpc.nisd patch
Date: Apr/21/97

.....


(from 103612-06)

1262666 nscd client backend, getxby_door, has buffer overflows


Note that the libc patches fix several more security problems.


Casper

• Next message: Jonas Stahre: "Re: Fun with devices [was: Re: /dev/tcx0 crashes SunOS 4.1.4 on"
• Previous message: Oliver Xymoron: "Re: Bug in majordomo"
• In reply to: Charles Howes: "Getpwnam bus error.. is this patched?"
• Next in thread: maximum entropy: "Re: SunOS 4.1.4 ftp serious bug"