Tru64 Unix (various versions) stdio vulnerability

[Arrigo Triulzi <arrigo () northsea sevenseas org>]

There is an stdio vulnerability in Tru64 Unix version 4.0F and up
(individual announcements are mailed for each version).

Attached is the announcment for Tru64 Unix version 4.0G...

Arrigo

> --- Begin Message ---
>
>
> From: system PRIVILEGED account <root () stage1 cxo cpqcorp net>
>
> Date: Wed, 12 Mar 2003 02:30:17 -0700 (MST)
>
> *******************************************************************************
> *                                                                             *
> *                  This is an update to an existing patch...                  *
> *                                                                             *
> *  Online links can be found at                                               *
> *    http://ftp.support.compaq.com/patches/public/unix/v4.0g/t64v40gb17-c0028500-17206-es-20030305.README
> *******************************************************************************
>
>
> TITLE: SSRT0845U - HP Tru64 UNIX Potential stdio Security Vulnerability
>  
> New Kit Date:       12-MAR-2003
> Modification Date:  Not Applicable
> Modification Type:  NEW KIT
>
> Copyright (c) Hewlett-Packard Company 2003.  All rights reserved.
>
>
> PRODUCT:    HP Tru64 UNIX [R] 4.0G
> SOURCE:     Hewlett-Packard Company
>
> ECO INFORMATION:
>
>      ECO Name:  T64V40GB17-C0028500-17206-ES-20030305
>      ECO Kit Approximate Size:  2.78MB 
>      Kit Applies To:  HP Tru64 UNIX 4.0G PK3 (BL17)
>
>      ECO Kit CHECKSUMS:
>         /usr/bin/sum results:  
>         60797   2850
>
>         /usr/bin/cksum results: 
>         2600825418 2918400
>
>         MD5 results:   
>         04a39050f68d24f9fc6bc7944970077f
>
>         SHA1 results:
>         a80de3fb86c618fc187c44609c94c3e72791739c
>
>
> ECO KIT SUMMARY:
>
> A dupatch-based, Early Release Patch kit exists for HP Tru64 UNIX 4.0G that
> contains solutions to the following problem(s):
>
> A potential security vulnerability has been identified in the HP Tru64 UNIX 
> operating system which may result in non-privileged users gaining 
> unauthorized access to files or privileged access on the system.  
> This potential vulnerability may be in the form of a local and 
> remote security domain risk.
>
> The following potential security vulnerability has been corrected:
>
>     SSRT0845U  stdio file descriptors     (Severity - High)
>
>
> The Patch Kit Installation Instructions and the Patch Summary and Release
> Notes documents provide patch kit installation and removal instructions
> and a summary of each patch. Please read these documents prior to 
> installing patches on your system.
>
> The patches in this ERP kit will also be available in the next mainstream
> patch kit - HP Tru64 UNIX 4.0G Patch Kit 4.
>
>
> INSTALLATION NOTES:
>
> 1) Install this kit with the dupatch utility that is included in the patch
>    kit. You may need to baseline your system if you have manually changed
>    system files on your system. The dupatch utility provides the baselining
>    capability.
>
> 2) The patch in this ERP kit DOES have file intersections with a 
>    previous ERP for SSRT1-41U, SSRT0742U, and SSRT0759U. Please 
>    see Superceded Patch list section below. 
>
> 3) This ERP kit will NOT install over any Customer Specific Patches (CSPs)
>    which have file intersections with this ERP kit. Contact your normal
>    Service Provider for assistance if the installation of this ERP kit is
>    blocked by any of your installed CSPs.
>
>
> INSTALLATION PREREQUISITES:
>
> You must have installed HP Tru64 UNIX 4.0G PK3 (BL17) prior to installing 
> this Early Release Patch Kit.
>
>
> SUPERSEDED PATCH LIST:
>
> This patch kit supersedes the following Tru64 UNIX patch kit:
>
> 1) Tru64 UNIX Security Vulnerability SSRT1-41U, SSRT0742U, SSRT0759U
>
>    4.0G  T64V40GB17-C0009303-12856-E-20020115.tar
>
>
> This ERP kit is built so it will install over the SSRT1-41U, SSRT0742U, 
> SSRT0759U patch or standalone. However, installation will be blocked if any 
> other patches have been installed that affect the distributed file(s) in 
> the patch kit. 
>
>                          ***************************
>                          *****  IMPORTANT NOTE *****
>                          ***************************
>
> In order to get the complete set of fixes included in SSRT1-41U, SSRT0742U, 
> and SSRT0759U, the patchkit for SSRT1-41U, SSRT0742U, and SSRT0759U should be 
> installed prior to installing SSRT0845U.
>
> See http://cybrary.inet.cpqcorp.net/ARCHIVE/ADVISORIES/BLITZ/TD002989.HTML 
>
> for details concerning Tru64 UNIX Security Vulnerability SSRT1-41U, 
> SSRT0742U, SSRT0759U.
>         
>         
>
> KNOWN PROBLEMS WITH THE PATCH KIT:
>
> None.
>
>
> RELEASE NOTES FOR T64V40GB17-C0028500-17206-ES-20030305:
>
>
>                          Release Notes
>
>      This document summarizes the contents and special instructions for the 
>      Tru64 UNIX V4.0G patches contained in this kit.
>
>      For information about installing or removing patches, baselining, 
>      and general patch management, see the Patch Kit Installation 
>      Instructions document. 
>
> 1 Release Notes
>
>
> This Early Release Patch Kit Distribution contains:
>
>    - fixes that resolve the problem(s) reported in: 
>         o 93730 SSRT0742U SSRT0759U SSRT0845U SSRT1-40U SSRT1-41U SSRT1-42U SSRT1-45U SSRT1-48U 
>              * for Tru64 UNIX V4.0G T64V40GAS0003-20010613.tar (BL17)
>
>  The patches in this kit are being released early for general customer use.
>  Refer to the Release Notes for a summary of each patch and installation 
>  prerequisites.
>
>  Patches in this kit are installed by running dupatch from the directory 
>  in which the kit was untarred. For example, as root on the target system:
>
>         > mkdir -p /tmp/CSPkit1
>         > cd /tmp/CSPkit1
>         > copy the kit to /tmp/CSPkit1
>         > tar -xpvf DUV40D13-C0044900-1285-20000328.tar
>         > cd patch_kit
>         > ./dupatch
>
> 2 Special Instructions
>
> There are no special instructions for Tru64 UNIX V4.0G Patch C285.00
>
>
> 3 Summary of CSPatches contained in this kit
>
>
> Tru64 UNIX V4.0G
>
> PatchId                 Summary Of Fix
> ----------------------------------------
> C285.00                 Fix SSRT0845U,SSRT1-41U,SSRT0742U,SSRT0759U, kernel fixes
>
>
> 4 Additional information from Engineering
>
>
> None
>
>
>
> 5 Affected system files
> This patch delivers the following files:
>
> Tru64 UNIX V4.0G
>         Patch C285.00
>                 ./sys/BINARY/proc.mod
>                         CHECKSUM:       03623 4
>                         SUBSET: OSFBIN445
>                 ./sys/BINARY/std_kern.mod
>                         CHECKSUM:       41401 1185
>                         SUBSET: OSFBIN445
>                 ./sys/BINARY/vfs.mod
>                         CHECKSUM:       59121 378
>                         SUBSET: OSFBIN445
>                 ./usr/sys/include/sys/fcntl.h
>                         CHECKSUM:       55182 12
>                         SUBSET: OSFBINCOM445
>
>
>
> [R] UNIX is a registered trademark in the United States and other countries 
> licensed exclusively through X/Open Company Limited.
>
> Copyright Hewlett-Packard Company 2003.  All Rights reserved.
>
>   This software is proprietary to and embodies the confidential technology
>   of Hewlett-Packard Company.  Possession, use, or copying of this
>   software and media is authorized only pursuant to a valid written license
>   from Hewlett-Packard or an authorized sublicensor.
>
>        This ECO has not been through an exhaustive field test process.
>        Due to the experimental stage of this ECO/workaround, Hewlett-Packard
>        makes no representations regarding its use or performance. The
>        customer shall have the sole responsibility for adequate protection
>        and back-up data used in conjunction with this ECO/workaround.
>
>
> ---
> You are currently subscribed to unix as: arrigo () albourne com
> To unsubscribe send a blank email to leave-unix-2793K () list support compaq com
>
> --- End Message ---