Article View: comp.security.misc
Article #454recent security patches
From: Brian Fitzgerald
Date: Thu, 05 Nov 1992 21:15
Date: Thu, 05 Nov 1992 21:15
32 lines
2130 bytes
2130 bytes
Y'know most of this stuff is fairly generic. This table should have a column for every unix operating system developer and reseller. Good idea for a FAQ! > ============================================================================ > > patch comments what to do for 4.1.3 > ----------------------------------------------------------------------------- > 100103 file permissions <get patch rev 11> > 100513 TIOCCONS, pty living on (CA-90:12,etc) <get rev 01> > 100173 get root via NFS uids (CA-91:21,CA-92:15) <get rev 09> > 100296 rpc.mountd, netgroups (CA-91:09,CA-92:12) <get rev 04> > 100305 lpd deletes anything (CA-91:10a) <get rev 10> > 100376 SPARC integer / and * (CA-91:16,CA-92:15) <in 4.1.3> > 100383 rdist lets you make setuid files (CA-91:20) <get rev 05> > 100424 fsirand and nfs handles (reqs 173) (CA-91:21) <patch forthcoming> > 100448 OW 3.0 loadmodule gives you root (CA-91:22) <get rev 01?> > 100478 xlock screws up <??> > 100482 several NIS holes (CA-92:13) <get rev 03> > 100567 icmp redirects, denial of service (CA-92:15) <get rev 04> > 100630,100633,100377 -- > getting root via LD_ and env vars (CA-92:11) <get 377-05, ...??> > > I've not gone after info on the C2 Jumbo Patch, 100564, which impacts > rpc.yppasswdd, rpc.pwdauthd -- we're not running C2 (yet). > > 100513 supercedes 100188 (CA-90:12), sez Ken Pons. > > 100633 is for Sun Shield (so we don't care), says Steve Scampani.
Technical Details
Message-ID:
<baj1tvc@rpi.edu>Path:
arc1-ca.pugleaf.net!sparky!uunet!hela.iti.org!usc!rpi!fitzgbReferences:
<1992Oct16.161209.3142@src.honeywell.com> <1992Nov4.150824.26312@src.honeywell.com>Show Full Headers
Complete Article Headers
Newsgroups: comp.security.misc Path: arc1-ca.pugleaf.net!sparky!uunet!hela.iti.org!usc!rpi!fitzgb From: fitzgb@mml0.meche.rpi.edu (Brian Fitzgerald) Subject: recent security patches Message-ID: <baj1tvc@rpi.edu> Nntp-Posting-Host: mml0.meche.rpi.edu Organization: Rensselaer Polytechnic Institute, Troy, NY References: <1992Oct16.161209.3142@src.honeywell.com> <1992Nov4.150824.26312@src.honeywell.com> Date: Thu, 5 Nov 1992 21:15:58 GMT Lines: 32