[214] in Best-of-Security

home help back first fref pref prev next nref lref last post

BoS: Sun Security Bulletin #00142

daemon@ATHENA.MIT.EDU (Colin Campbell)
Thu Jun 5 00:17:44 1997

From: Colin Campbell <sgcccdc@citec.qld.gov.au>
Date: Thu, 5 Jun 1997 11:24:25 +1000 (EST)
Cc: best-of-security@suburbia.net
In-Reply-To: <3.0.2.32.19970604164609.00dc0ef8@rodan> from "marc@delta-global.com>" at Jun 4, 97 04:46:09 pm
Errors-To: best-of-security-request@suburbia.net
To: best-of-security@suburbia.net
Resent-From: best-of-security@suburbia.net


Hi,

I just downloaded 104331-02 for SunOS 5.5.1 and restarted rpcbind. Well
look at that (lsof -p xxx):

rpcbind    1070     root    3u  inet   0x5012cbc8        0t0        UDP *:sunrpc
rpcbind    1070     root    4u  inet   0x5012cc38        0t0        UDP *:0
rpcbind    1070     root    5u  inet   0x5012cca8        0t0        UDP *:34378
rpcbind    1070     root    6u  inet   0x5012ca78        0t0        TCP *:sunrpc
rpcbind    1070     root    7u  inet   0x5012cb58        0t0        TCP *:39168

So what was the patch supposed to do?

Colin

My mailer thinks marc@delta-global.com> said:
> 
> 
> 
> 
> 
> ------------------------------------------------------------------------------
>  		   Sun Microsystems, Inc. Security Bulletin
>  		
> Bulletin Number:	#00142
> Date: 			June 4 1997
> Cross-Ref:		
> Title:			Vulnerability in rpcbind
> 
> ------------------------------------------------------------------------------
	[stuff deleted]
>     	
> 4.  List of Patches
> 
>     The vulnerability relating to rpcbind is fixed by the following patches:
> 
> 	OS version		Patch ID
> 	----------		--------
> 	SunOS 5.5.1		104331-02
> 	SunOS 5.5.1_x86         104332-02
>      	SunOS 5.5		104357-02
>      	SunOS 5.5_x86           104358-02
>      	SunOS 5.4               102070-03	
> 	SunOS 5.4_x86           102071-03	
>      	SunOS 5.3               102034-02	
> 


home help back first fref pref prev next nref lref last post