Re: Exploit of rpc.cmsd

Casper Dik (casperHOLLAND.SUN.COM)
Wed, 14 Jul 1999 23:40:26 +0200

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Next message: Max Vision: "credit (was Re: About IGMP and another exploit for Windows95x/98x)"
• Previous message: Aleph One: "BO2K"

Many people told me that they couldn't find the patches.
Not even the one that was supposed to have been released a week ago.

>>The following patches have now been released:
>>
>> 107022-03 CDE 1.3 (Solaris 7/SPARC)

These patches should show up on SunSolve shortly; (Ok, so I should have known
Aleph posts quicker than Sun's patch process)

Solaris 2.4 is vulnerable, AFAIK, but the patches for it haven't been
finished yet.

>>
>>
>>Already released was (one week ago):
>>
>> 105566-08 CDE 1.2 (Solaris 2.6/SPARC)
>
>*Where* have they been released?

This is a typo; the x86 patch is rev -08 but the same patch as SPARC patch
is rev -07, make that:

        105566-07 CDE 1.2 (Solaris 2.6/SPARC)

which is available on SunSolve.

Sorry for the confusion; I should have checked SunSolve prior to
mailing Aleph.

Patches will be available on the public patch sites shortly.

Casper

• Next message: Max Vision: "credit (was Re: About IGMP and another exploit for Windows95x/98x)"
• Previous message: Aleph One: "BO2K"

This archive was generated by hypermail 2.0b3 on Wed Jul 14 1999 - 21:07:25 CDT