Thread View: aus.sun-works
2 messages
2 total messages
Started by Glenn Huxtable
Tue, 26 May 1992 09:57
pointers to Sun security holes worth knowing about
Author: Glenn Huxtable
Date: Tue, 26 May 1992 09:57
Date: Tue, 26 May 1992 09:57
24 lines
1812 bytes
1812 bytes
I'm preparing a seminar on general network system security and I'd like to
be able to give a list of the Sun (in particular) security patches that
*should* be applied to both SunOS 4.1.1 and SunSO 4.1.2.
I don't really want to know what the security holes are (well, I'd like to,
but I know it's a sensitive area :-). What I really want to do is be able to
list a series of security patches which *should* be applied to make their
systems (more) secure. The seminar is particularly aimed at people who find
themselves looking after a strange Unix box so the talk will include
things things like "run Crack and COPS before your users do", and
"apply these patches" etc.
I should have such a list myself (we've applied most that we have come across)
but I probably would miss some. Does anyone have a reasonably good list of
security patches worth being concerned about?
thanx
glenn
--
Email - glenn@cs.uwa.edu.au ,-_|\ glenn huxtable
phone - +61 9 380 2878 / \ dept of computer science
fax - +61 9 380 1089 *_,-._/ university of western australia
v
Re: pointers to Sun security holes worth knowing about
Author: Peter Elford
Date: Wed, 27 May 1992 01:59
Date: Wed, 27 May 1992 01:59
220 lines
13744 bytes
13744 bytes
In article <glenn.706874274@chuditch>, glenn@cs.uwa.oz.au (Glenn Huxtable) writes: |> I'm preparing a seminar on general network system security and I'd like to |> be able to give a list of the Sun (in particular) security patches that |> *should* be applied to both SunOS 4.1.1 and SunSO 4.1.2. Someone posted a couple of lists for SunOS 4.1.2 that I have attached below. Gustav at the ANU has collected together some patches as well: I have transferred the collection of SunOS-4.1.2 patches from uxa.ecn.bgu.edu and put them in ftp-anonymous directory on arp.anu.edu.au. There are some patches there which I couldn't find at the ANU, nor on archie.au or munnari.oz.au. You will find the following patches in /pub/sun-fixes/sunos-4.1.2 on arp: gustav@arp:/rap/ftp/pub/sun-fixes/sunos-4.1.2 203 $ ls -R total 10316 144 100188-02.tar.Z 1352 100444-12.tar.Z 33 100499-02.tar.Z 44 100224-03.tar.Z 4 100448-01.tar.Z 50 100505-01.tar.Z 23 100296-02.tar.Z 1224 100451-02.tar.Z 30 100507-01.tar.Z 36 100303-02.tar.Z 1288 100451-09.tar.Z 304 100512-01.tar.Z 70 100338-04.tar.Z 1640 100452-07.tar.Z 15 100527-01.tar.Z 41 100342-02.tar.Z 52 100458-01.tar.Z 38 100529-01.tar.Z 144 100359-04.tar.Z 184 100462-01.tar.Z 200 100542-01.tar.Z 128 100383-04.tar.Z 184 100462-03.tar.Z 16 100547-01.tar.Z 66 100407-03.tar.Z 18 100475-01.tar.Z 7 100567-01.tar.Z 4 100409-02.tar.Z 58 100478-01.tar.Z 72 100575-01.tar.Z 6 100441-01.tar.Z 7 100479-01.tar.Z 8 100591-01.tar.Z 1344 100444-01.tar.Z 112 100493-01.tar.Z 1 openwin3/ 1344 100444-03.tar.Z 25 100496-01.tar.Z openwin3: total 4951 1352 100444-12.tar.Z 184 100462-03.tar.Z 304 100512-01.tar.Z 1288 100451-09.tar.Z 112 100493-01.tar.Z 38 100529-01.tar.Z 1640 100452-07.tar.Z 33 100499-02.tar.Z -- Peter Elford, e-mail: P.Elford@aarnet.edu.au Network Co-ordinator, phone: +61 6 249 3542 Australian Academic Research Network, fax: +61 6 249 1369 c/o, Computer Services Centre, pager: +61 6 245 3035 Australian National University post: PO Box 4 Canberra, AUSTRALIA Canberra 2601 In article <5230@ssc-bee.ssc-vax.boeing.com>, tff@plato.ds.boeing.com (Terry F Figurelle) writes: |> Here is a list of patches I got using a search for "4.1.2" on |> SUN's Online Support System (OSS). |> |> 48 documents retrieved. SUN ONLINE SUPPORT SYSTEM |> Id# Collection Doc. Name Synopsis |> 1 patches 100075 SunOS 4.1;4.1.1;4.1.2: lockd jumbo patch |> 2 patches 100249 SunOS 4.1;4.1.1;4.1.2: automounter JUMBO patch |> 3 patches 100296 SunOS 4.1, 4.1.1, 4.1.2: netgroup exports to world |> 4 patches 100303 SunOS 4.1;4.1.1;4.1.2: system freezes using loopba |> 5 patches 100338 SunOS 4.1.1;4.1.2: system crashes with assertion f |> 6 patches 100342 SunOS 4.1;4.1.1;4.1.2: NIS client needs long recov |> 7 patches 100347 SunOS 4.1.1;4.1.2: panic's when using fifo's (name |> 8 patches 100469 SunOS 4.1.1;4.1.2: cdrom mount error messages |> 9 patches 100474 SunOS 4.1.2: Assertion Failure on 1.3GB Elite Driv |> 10 patches 100475 SunOS 4.1.2: mmap system call on galaxy causes BAD |> 11 patches 100495 SunOS 4.1.2: asynch I/O on a sun4m machine causes |> 12 patches 100490 SunOS 4.1.2: patches for libxpg |> 13 patches 100453 SunOS 4.1.2: GT DVMA window size can be increased |> 14 patches 100505 SunOS 4.1.1;4.1.2: Zero length directories can be |> 15 patches 100507 SunOS 4.1.2: tmpfs fix |> 16 patches 100511 SunOS 4.1.2: SunDiag cg6test failed on segmentatio |> 17 patches 100516 SunOS 4.1.2: increase kernelmap HEAPBYTES to preve |> 18 patches 100542 SunOS 4.1.2: MP IPI file system corruption |> 19 patches 100531 SunOS 4.1.2: libc jumbo patch Domestic Version |> 20 patches 100547 SunOS 4.1.2: sundiag fputest kvm_open failed |> |> [Esc]PrevScr [^F]Forward [^B]Backward [^T]Top [^E]End [^G]Mark Enter Id# |> |> 48 documents retrieved. SUN ONLINE SUPPORT SYSTEM |> Id# Collection Doc. Name Synopsis |> 20 patches 100547 SunOS 4.1.2: sundiag fputest kvm_open failed |> 21 patches 100496 SunOS 4.1.1, 4.1.2: ptrace panic with a memory fau |> 22 patches 100539 SunOS 4.1.2: umount of busy hsfs filesystem causes |> 23 patches 100570 SunOS 4.1.1;4.1.2: ie0 ethernet jumbo patch |> 24 patches 100536 SunOS 4.1.2: NFS can cause panic: assertion failed |> 25 patches 100537 SunOS 4.1.2: async i/o peaks can hang system |> 26 patches 100564 SunOS 4.1.2: C2 Jumbo patch |> 27 patches 100566 SunOS 4.1.2: system panics with datafault when usi |> 28 patches 100569 SunOS 4.1.2: xnews and mouse freeze running GT acc |> 29 patches 100567 SunOS 4.1.2: mfree panic due to mbuf being freed t |> 30 patches 100575 SunOS 4.1.2: MP machines do not perform as well as |> 31 patches 100534 SunOS 4.1.2: nettest dies with segmentation violat |> 32 patches 100581 SunOS 4.1.2: scsa st driver not reading past a dou |> 33 patches 100591 SunOS 4.1.2: simulated instruction traps cause reg |> 34 patches 100188 SunOS 4.1.1;4.1.2: pty can get output from another |> 35 patches 100224 SunOS 4.1.1;4.1.2: program "mail" "rmail" problem |> 36 patches 100274 SunOS 4.1;4.1.1;4.1.2: dup biodone related panics |> 37 patches 100305 SunOS 4.1;4.1.1;4.1.2: lpd can be used to delete a |> 38 patches 100359 SunOS 4.1;4.1.1;4.1.2: streams jumbo patch |> 39 patches 100383 SunOS 4.0.3;4.1;4.1.1;4.1.2: rdist security enhanc |> |> [Esc]PrevScr [^F]Forward [^B]Backward [^T]Top [^E]End [^G]Mark Enter Id# |> |> 48 documents retrieved. SUN ONLINE SUPPORT SYSTEM |> Id# Collection Doc. Name Synopsis |> 39 patches 100383 SunOS 4.0.3;4.1;4.1.1;4.1.2: rdist security enhanc |> 40 patches 100407 SunOS 4.1;4.1.1; 4.1.2: accounting files are corru |> 41 patches 100431 SunOS 4.1.1;4.1.2: Performance improvements for GT |> 42 patches 100458 SunOS 4.1;4.1.1;4.1.2: Setitimer sometimes fails t |> 43 patches 100494 SunOS4.1.1;4.1.2: munmap'ing ctl register page clo |> 44 patches 100484 SunOS 4.1.2: esp0 appears about 20 times a day on |> 45 patches 100521 SunOS 4.1.1;4.1.2: GT crash using screenload if mo |> 46 patches 100532 SunOS 4.1.2: libc jumbo patch (International) |> 47 patches 100527 SunOS 4.1.1;4.1.2: rsh uses old-style selects inst |> 48 patches 100556 SunOS 4.1;4.1.1;4.1.2: cpio data corruption when 2 |> |> |> [Esc]PrevScr [^F]Forward [^B]Backward [^T]Top [^E]End [^G]Mark Enter Id# |> |> |> Hope this helps. You can call your local SUN office and they should be able |> to tell you how to access this system. They sent me a manual which listed |> toll free numbers for several countries and how to connect using a modem. |> The system has the capability to send you patches via email or they will |> ship them on tape/floppy. |> |> |> Terry F Figurelle Internet: tff@plato.ds.boeing.com |> Boeing Defense & Space Group Voice: (206)773-9987 In article <1992Apr8.155212.24627@mintaka.lcs.mit.edu>, metcalf@catfish.LCS.MIT.EDU (Chris Metcalf) writes: |> I recently posted asking for suggestions on appropriate patches to |> install along with SunOS 4.1.2. This is the summary. I have marked |> with a star patches that fix known security problems; everyone should |> probably run the file-permissions script (it's not specifically |> labelled for 4.1.2, but it's basically harmless and just tries to fix a |> few bad setuid settings on some files) and install the rdist patch. |> People using yppasswdd or pwdauthd should install the C2 jumbo patch. |> |> 100075-08 lockd jumbo patch |> 100103-10 *script to change file permissions to a more secure mode |> 100188-02 pty can get output from another application |> 100224-03 program "mail" "rmail" problem in delivering mail |> 100249-03 automounter JUMBO patch |> 100303-02 system freezes using loopback interface |> 100342-02 NIS client needs long recovery time if server reboots |> 100359-04 streams jumbo patch |> 100383-04 *rdist security enhancement |> 100458-01 Setitimer sometimes fails to deliver a SIGALRM. |> 100469-01 cdrom mount error messages |> 100474-01 Assertion Failure on 1.3GB Elite Drive |> 100490-01 patches for libxpg |> 100505-01 Zero length directories can be left on system |> 100507-01 tmpfs fix |> 100539-01 umount of busy hsfs filesystem causes panic data fault |> 100564-01 *C2 Jumbo patch |> 100570-01 ie0 ethernet jumbo patch |> |> The following patches may be useful for people with different hardware |> or software environments than ours. Note that patches 474, 475, and |> 544 are not listed in the current set of 4.1.2 patches in the Sun |> database, but are labelled specifically for 4.1.2. (Curious!) 425 is |> not labelled for 4.1.2, but fixes the old problem of using "sri-nic.arpa" |> as the address for the "whois" command; we just fix this with emacs. |> 10377-02 is a 4.1.1 patch, but is probably still better than the |> buggy 4.1.2 version of sendmail... |> |> 100274-02 dup biodone related panics |> 100338-04 system crashes with assertion failed panic |> 100377-02 Sendmail.mx doesn't recognize wildcard, etc. |> 100407-03 accounting files are corrupted (and other acct problems) |> 100425-01 whois gets host unknown when using the hard coded NICHOST |> 100431-03 Performance improvements for GT |> 100453-01 GT DVMA window size can be increased |> 100475-01 mmap system call on galaxy causes BAD TRAP |> 100484-01 esp0 appears about 20 times a day on console |> 100494-01 munmap'ing ctl register page clobbers shmem buffer |> 100495-01 asynch I-O on a sun4m machine causes panics |> 100496-01 ptrace panic with a memory fault |> 100511-01 SunDiag cg6test failed on segmentation violation |> 100516-01 increase HEAPBYTES to prevent system hangs |> 100521-01 GT crash using screenload if mouse is moving |> 100527-01 rsh uses old-style selects instead of 4.0 selects |> 100531-01 libc jumbo patch |> 100536-01 NFS can cause panic: assertion failed crashes |> 100537-01 async i-o peaks can hang system |> 100542-01 MP with cg6 and prestoserve crashes on ipi |> 100544-01 Mailtool3.0 |> 100547-01 sundiag fputest kvm_open failed |> 100569-01 xnews and mouse freeze running GT accelerated application |> |> The following patches were also suggested by one or two people, but as |> they seem to be, by and large, older patches that aren't listed in the |> 4.1.2 patch set, we decided not to install them (possibly our mistake!): |> |> 100272-04 in.comsat daemon fails with 8-character login names |> 100296-02 netgroup exports to world via rpc.mountd |> 100448-01 OpenWindows 3.0: loadmodule is a security hole. |> |> For those people interested in finding patches on the Internet, let me |> recommend archie. UUNET does not have particularly current patches, |> and some that they do have are at old revision levels. It's also quite |> easy to get patches from Sun, either by email or by snail mail. |> |> As a final note, let me repeat Sun's traditional caution about patches: |> except for security-related patches, your best bet is to apply a patch |> only once you actually have a problem; otherwise you may end up causing |> yourself extra problems with patches that don't work well together. |> |> Thanks to Robert Harker <harker@harker.com>, Alain Brossard |> <brossard@sasun1.epfl.ch>, Stefan.Turowski@informatik.uni-erlangen.de, |> and F. L. Charles Seeger III <seeger@thedon.cis.ufl.edu>. |> |> Chris Metcalf |> |> ps. For those of you who got this far, a question: is the new |> /usr/lib/lpd immune to the bug fixed in 100305 (moving /dev/printer to |> /dev/lpd/printer, etc.)? lpd seems to be newer, but... ? |> -- |> Chris Metcalf, MIT Laboratory for Computer Science |> metcalf@lcs.mit.edu // +1 (617) 253-7766
Thread Navigation
This is a paginated view of messages in the thread with full content displayed inline.
Messages are displayed in chronological order, with the original post highlighted in green.
Use pagination controls to navigate through all messages in large threads.
Back to All Threads