Re: Exploit of rpc.cmsd

Casper Dik (casperHOLLAND.SUN.COM)
Thu, 15 Jul 1999 23:58:04 +0200

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Next message: Mike Perry: "Re: Shared memory DoS's (Redhat retraction)"
• Previous message: Steve Jackson: "Bug in Axent 5.0"
• Next in thread: John Hall: "Re: Exploit of rpc.cmsd"

>(What about Solaris 2.4?)

Both CDE 1.0.1/1.0.2 (which have seperate rpc.cmsd binaries; these
were merged in later releases) and Solaris 2.4 patches will be released
at a later date.

>Be aware that when these patches[*] are applied, the existing rpc.cmsd
>process (if one exists) seems to be killed in a *prepatch* script--that
>is, *before* the programs are updated.

Thanks for noticing this; I've notified the persons responsible for
this patch; it will be addressed in a future release.

>I couldn't begin to speculate about why Sun didn't make this a postpatch
>script rather than a prepatch script.

Neither could I; it's a mistake.

Casper

• Next message: Mike Perry: "Re: Shared memory DoS's (Redhat retraction)"
• Previous message: Steve Jackson: "Bug in Axent 5.0"
• Next in thread: John Hall: "Re: Exploit of rpc.cmsd"

This archive was generated by hypermail 2.0b3 on Fri Jul 16 1999 - 02:50:34 CDT