[29351] in bugtraq
[security bulletin] SSRT0845U HP Tru64 UNIX, HP-UX stdio Potential
daemon@ATHENA.MIT.EDU (Dave Ahmad)
Tue Mar 18 12:26:02 2003
Date: Tue, 18 Mar 2003 10:01:33 -0700 (MST)
From: Dave Ahmad <da@securityfocus.com>
To: bugtraq@securityfocus.com
Message-ID: <Pine.LNX.4.43.0303181001270.27759-101000@mail.securityfocus.com>
MIME-Version: 1.0
Content-Type: MULTIPART/MIXED; BOUNDARY="-825423385-854593611-1048006893=:27759"
---825423385-854593611-1048006893=:27759
Content-Type: TEXT/PLAIN; charset=US-ASCII
David Mirza Ahmad
Symantec
"sabbe dhamma anatta"
0x26005712
8D 9A B1 33 82 3D B3 D0 40 EB AB F0 1E 67 C6 1A 26 00 57 12
---825423385-854593611-1048006893=:27759
Content-Type: APPLICATION/OCTET-STREAM; NAME="SSRT0845.txt.asc"
Content-Transfer-Encoding: BASE64
Content-ID: <Pine.LNX.4.43.0303181001271.27759@mail.securityfocus.com>
Content-Description: SSRT0845.txt.asc
Content-Disposition: ATTACHMENT; FILENAME="SSRT0845.txt.asc"
LS0tLS1CRUdJTiBQR1AgU0lHTkVEIE1FU1NBR0UtLS0tLQ0KSGFzaDogU0hBMQ0KDQpTRUNVUklU
WSBCVUxMRVRJTg0KDQpSRVZJU0lPTjogMA0KDQoNClRJVExFOiBTU1JUMDg0NVUgSFAgVHJ1NjQg
VU5JWCwgSFAtVVggc3RkaW8gUG90ZW50aWFsDQogICAgICAgU2VjdXJpdHkgVnVsbmVyYWJpbGl0
eQ0KDQoNCk5PVElDRTogVGhlcmUgYXJlIG5vIHJlc3RyaWN0aW9ucyBmb3IgZGlzdHJpYnV0aW9u
IG9mIHRoaXMNCkJ1bGxldGluIHByb3ZpZGVkIHRoYXQgaXQgcmVtYWlucyBjb21wbGV0ZSBhbmQg
aW50YWN0Lg0KDQpSRUxFQVNFIERBVEU6IE1hcmNoIDIwMDMNCg0KDQpTRVZFUklUWTogIEhpZ2gN
Cg0KU09VUkNFOiAgSGV3bGV0dC1QYWNrYXJkIENvbXBhbnkNCiAgICAgICAgIFNvZnR3YXJlIFNl
Y3VyaXR5IFJlc3BvbnNlIFRlYW0NCg0KUkVGRVJFTkNFOiAgU1NSVDA4NDVVLCBWVSM4MDkzNDcs
IEZyZWVCU0QtU0EtMDI6MjMuc3RkaW8NCg0KDQpQUk9CTEVNIFNVTU1BUlk6DQoNClRoaXMgYnVs
bGV0aW4gd2lsbCBiZSBwb3N0ZWQgdG8gdGhlIHN1cHBvcnQgd2Vic2l0ZQ0Kd2l0aGluIDI0IGhv
dXJzIG9mIHJlbGVhc2UgdG8gLQ0KaHR0cDovL3RoZW5ldy5ocC5jb20vY291bnRyeS91cy9lbmcv
c3VwcG9ydC5odG1sDQoNClVzZSB0aGUgU0VBUkNIIElOIGZlYXR1cmUgYm94LCBlbnRlciBTU1JU
MDg0NSBpbiB0aGUNCnNlYXJjaCB3aW5kb3cuDQoNCg0KDQogICAgU1NSVDA4NDVVIHN0ZGlvIGZp
bGUgZGVzY3JpcHRvcnMgKFNldmVyaXR5IC0gSGlnaCkNCg0KDQpBIHBvdGVudGlhbCBzZWN1cml0
eSB2dWxuZXJhYmlsaXR5IGhhcyBiZWVuIGlkZW50aWZpZWQgaW4NCnRoZSBIUCBUcnU2NCBVTklY
IG9wZXJhdGluZyBzeXN0ZW0gd2hpY2ggbWF5IHJlc3VsdCBpbg0Kbm9uLXByaXZpbGVnZWQgdXNl
cnMgZ2FpbmluZyB1bmF1dGhvcml6ZWQgYWNjZXNzIHRvIGZpbGVzDQpvciBwcml2aWxlZ2VkIGFj
Y2VzcyBvbiB0aGUgc3lzdGVtLiAgVGhpcyBwb3RlbnRpYWwNCnZ1bG5lcmFiaWxpdHkgbWF5IGJl
IGluIHRoZSBmb3JtIG9mIGEgbG9jYWwgYW5kIHJlbW90ZQ0Kc2VjdXJpdHkgZG9tYWluIHJpc2su
DQoNCg0KVkVSU0lPTlMgSU1QQUNURUQ6DQoNCiAgSFAgVHJ1NjQgVU5JWCBWNS4xQQ0KDQogIEhQ
IFRydTY0IFVOSVggVjUuMQ0KDQogIEhQIFRydTY0IFVOSVggVjUuMEENCg0KICBIUCBUcnU2NCBV
TklYIFY0LjBHDQoNCiAgSFAgVHJ1NjQgVU5JWCBWNC4wRg0KDQogIEhQLVVYDQoNCg0KDQpOT1Qg
SU1QQUNURUQ6DQoNCg0KICBIUC1NUEUvaXgNCg0KICBIUCBOb25TdG9wIFNlcnZlcnMNCg0KICBI
UCBPcGVuVk1TDQoNCg0KDQpSRVNPTFVUSU9OOg0KDQoNCiAgSFAtVVgNCg0KDQoNCiAgQXQgdGhl
IHRpbWUgb2Ygd3JpdGluZyB0aGlzIGRvY3VtZW50LCBIZXdsZXR0DQpQYWNrYXJkIGlzIGN1cnJl
bnRseSBpbnZlc3RpZ2F0aW5nIHRoZSBwb3RlbnRpYWwgaW1wYWN0DQp0byBIUCdzIHJlbGVhc2Vk
IE9wZXJhdGluZyBTeXN0ZW0gc29mdHdhcmUgcHJvZHVjdHMuDQpBcyBmdXJ0aGVyIGluZm9ybWF0
aW9uIGJlY29tZXMgYXZhaWxhYmxlIEhQIHdpbGwgcHJvdmlkZQ0Kbm90aWNlIG9mIHRoZSBhdmFp
bGFiaWxpdHkgb2YgYW55IG5lY2Vzc2FyeSBwYXRjaGVzDQp0aHJvdWdoIHN0YW5kYXJkIHNlY3Vy
aXR5IGJ1bGxldGluIGFubm91bmNlbWVudHMgYW5kDQpiZSBhdmFpbGFibGUgZnJvbSB5b3VyIG5v
cm1hbCBIUCBTZXJ2aWNlcyBzdXBwb3J0IGNoYW5uZWwuDQoNCg0KDQogIEhQIFRSVTY0IFVOSVgN
Cg0KICBFYXJseSBSZWxlYXNlIFBhdGNoZXMgKEVSUHMpIGFyZSBub3cgYXZhaWxhYmxlIGZvciBh
bGwNCnN1cHBvcnRlZCB2ZXJzaW9ucyBvZiBIUCBUcnU2NCBVTklYLiBUaGUgRVJQIGtpdHMgdXNl
IGR1cGF0Y2gNCnRvIGluc3RhbGwgYW5kIHdpbGwgbm90ICBpbnN0YWxsIG92ZXIgYW55IEN1c3Rv
bWVyLVNwZWNpZmljLVBhdGNoZXMNCihDU1BzKSB3aGljaCBoYXZlIGZpbGUgaW50ZXJzZWN0aW9u
cyB3aXRoIHRoZSBFUlBzLiBDb250YWN0IHlvdXINCm5vcm1hbCBzdXBwb3J0IGNoYW5uZWwgYW5k
IHJlcXVlc3QgSFAgVHJ1NjQgc2VydmljZXMgZWxldmF0ZSBhDQpjYXNlIHRvICBTdXBwb3J0IEVu
Z2luZWVyaW5nIGlmIGEgQ1NQIG11c3QgYmUgbWVyZ2VkIHdpdGggb25lDQpvZiB0aGUgRVJQcy4N
Cg0KUGxlYXNlIHJldmlldyB0aGUgUkVBRE1FIGZpbGUgZm9yIGVhY2ggcGF0Y2ggcHJpb3IgdG8g
aW5zdGFsbGF0aW9uLg0KDQpOT1RFOiBUaGVzZSBwYXRjaGVzIGNhbiBiZSBpbnN0YWxsZWQgb24g
dG9wIG9mIFNTUlQxLTQxVSwNCiAgICAgIFNTUlQwNzQyVSwgYW5kIFNTUlQwNzU5VSBvciBzdGFu
ZGFsb25lLiBIb3dldmVyLCBpbiBvcmRlcg0KICAgICAgdG8gZ2V0IHRoZSBjb21wbGV0ZSBzZXQg
b2YgZml4ZXMsIFNTUlQxLTQxVSwgU1NSVDA3NDJVLA0KICAgICAgYW5kIFNTUlQwNzU5VSBzaG91
bGQgYmUgaW5zdGFsbGVkIGJlZm9yZSBpbnN0YWxsaW5nDQogICAgICBTU1JUMDg0NVUuDQoNClRo
ZSBmaXhlcyBjb250YWluZWQgaW4gdGhpcyBzZXQgb2YgRVJQIGtpdHMgd2lsbCBiZSBhdmFpbGFi
bGUNCmluIHRoZSBmb2xsb3dpbmcgbWFpbnN0cmVhbSBwYXRjaCBraXRzOg0KDQogICAgICBvICBI
UCBUcnU2NCBVTklYIDQuMEcgICBQSzQNCg0KICAgICAgbyAgSFAgVHJ1NjQgVU5JWCA0LjBGICAg
UEs4DQoNClRoZSBmb2xsb3dpbmcgRVJQIGtpdHMgYXJlIGFwcGxpY2FibGUgdG8gYW55IHN5c3Rl
bSBydW5uaW5nDQpIUCBUcnU2NCBVTklYIG9yIEhQIFRydUNsdXN0ZXIgU2VydmVyIHNvZnR3YXJl
Lg0KDQogICAgSFAgVHJ1NjQgVU5JWC9UcnVDbHVzdGVyIFNlcnZlciA1LjFBDQogICAgUFJFUkVR
VUlTSVRFOiBWNS4xQSB3aXRoIFBLMyAoQkwzKSBpbnN0YWxsZWQNCiAgICBFUlAgS2l0IE5hbWU6
IFQ2NFY1MUFCMy1DMDEwNjQwMS0xNzI1Ni1FUy0yMDAzMDMwNi50YXIgDQogICAgS2l0IExvY2F0
aW9uOg0KZnRwOi8vZnRwMS5zdXBwb3J0LmNvbXBhcS5jb20vcHVibGljL3VuaXgvdjUuMWEvICAg
IA0KDQogICAgSFAgVHJ1NjQgVU5JWC9UcnVDbHVzdGVyIFNlcnZlciA1LjEgDQogICAgUFJFUkVR
VUlTSVRFOiBWNS4xIHdpdGggUEs2IChCTDIwKSBpbnN0YWxsZWQNCiAgICBFUlAgS2l0IE5hbWU6
IFQ2NFY1MUIyMC1DMDE3MjMwMS0xNzI1NS1FUy0yMDAzMDMwNi50YXINCiAgICBLaXQgTG9jYXRp
b246DQpmdHA6Ly9mdHAxLnN1cHBvcnQuY29tcGFxLmNvbS9wdWJsaWMvdW5peC92NS4xLyAgDQoN
CiAgICBIUCBUcnU2NCBVTklYL1RydUNsdXN0ZXIgU2VydmVyIDUuMQ0KICAgIFBSRVJFUVVJU0lU
RTogVjUuMSB3aXRoIFBLNSAoQkwxOSkgaW5zdGFsbGVkDQogICAgRVJQIEtpdCBOYW1lOiBUNjRW
NTFCMTktQzAxNDM3MDQtMTcyNTQtRVMtMjAwMzAzMDYudGFyDQogICAgS2l0IExvY2F0aW9uOg0K
ZnRwOi8vZnRwMS5zdXBwb3J0LmNvbXBhcS5jb20vcHVibGljL3VuaXgvdjUuMS8NCg0KICAgIEhQ
IFRydTY0IFVOSVgvVHJ1Q2x1c3RlciBTZXJ2ZXIgNS4wQQ0KICAgIFBSRVJFUVVJU0lURTogVjUu
MEEgd2l0aCBQSzMgKEJMMTcpIGluc3RhbGxlZA0KICAgIEVSUCBLaXQgTmFtZTogVDY0VjUwQUIx
Ny1DMDAzMTQwMC0xNzIyMC1FUy0yMDAzMDMwNS50YXINCiAgICBLaXQgTG9jYXRpb246DQpmdHA6
Ly9mdHAxLnN1cHBvcnQuY29tcGFxLmNvbS9wdWJsaWMvdW5peC92NS4wYS8NCg0KICAgIEhQIFRy
dTY0IFVOSVgvVHJ1Q2x1c3RlciBTZXJ2ZXIgNC4wRw0KICAgIFBSRVJFUVVJU0lURTogVjQuMEcg
d2l0aCBQSzMgKEJMMTcpIGluc3RhbGxlZA0KICAgIEVSUCBLaXQgTmFtZTogVDY0VjQwR0IxNy1D
MDAyODUwMC0xNzIwNi1FUy0yMDAzMDMwNS50YXINCiAgICBLaXQgTG9jYXRpb246DQpmdHA6Ly9m
dHAxLnN1cHBvcnQuY29tcGFxLmNvbS9wdWJsaWMvdW5peC92NC4wZy8NCg0KICAgIEhQIFRydTY0
IFVOSVgvVHJ1Q2x1c3RlciBTZXJ2ZXIgNC4wRg0KICAgIFBSRVJFUVVJU0lURTogVjQuMEYgd2l0
aCBQSzcgKEJMMTgpIGluc3RhbGxlZA0KICAgIEVSUCBLaXQgTmFtZTogRFVWNDBGQjE4LUMwMDky
NjAwLTE3MjA1LUVTLTIwMDMwMzA1LnRhcg0KICAgIEtpdCBMb2NhdGlvbjoNCmZ0cDovL2Z0cDEu
c3VwcG9ydC5jb21wYXEuY29tL3B1YmxpYy91bml4L3Y0LjBmLw0KDQoNCg0KTUQ1IGFuZCBTSEEx
IGNoZWNrc3VtcyBhcmUgYXZhaWxhYmxlIGluIHRoZSBwdWJsaWMgcGF0Y2gNCm5vdGljZSBmb3Ig
dGhlIEVSUCBraXRzLiBZb3UgY2FuIGZpbmQgaW5mb3JtYXRpb24gb24gaG93DQp0byB2ZXJpZnkg
TUQ1IGFuZCBTSEExIGNoZWNrc3VtcyBhdDoNCmh0dHA6Ly93d3cuc3VwcG9ydC5jb21wYXEuY29t
L3BhdGNoZXMvd2hhdHMtbmV3LnNodG1sDQoNCg0KDQpBZnRlciBjb21wbGV0aW5nIHRoZSB1cGRh
dGUsIEhQIHN0cm9uZ2x5IHJlY29tbWVuZHMgdGhhdA0KeW91IHBlcmZvcm0gYW4gaW1tZWRpYXRl
IGJhY2t1cCBvZiB5b3VyIHN5c3RlbSBkaXNrIHNvDQp0aGF0IGFueSBzdWJzZXF1ZW50IHJlc3Rv
cmUgb3BlcmF0aW9ucyBiZWdpbiB3aXRoIHVwZGF0ZWQNCnNvZnR3YXJlLiBPdGhlcndpc2UsIHlv
dSBtdXN0IHJlYXBwbHkgdGhlIHVwZGF0ZSBhZnRlciBhDQpmdXR1cmUgcmVzdG9yZSBvcGVyYXRp
b24uIEFsc28sIGlmIGF0IHNvbWUgZnV0dXJlIHRpbWUgeW91DQp1cGdyYWRlIHlvdXIgc3lzdGVt
IHRvIGEgbGF0ZXIgcGF0Y2ggdmVyc2lvbiwgeW91IG1heSBuZWVkDQp0byByZWFwcGx5IHRoZSBh
cHByb3ByaWF0ZSB1cGRhdGUuDQoNCg0KDQpUaGUgU1NSVCB0aGFua3MgRnJlZUJTRCBhbmQgUGF1
bCBTemFibyBmb3IgcmVwb3J0aW5nDQp0aGlzIHBvdGVudGlhbCB2dWxuZXJhYmlsaXR5IHRvIEhQ
Lg0KDQoNCg0KU1VQUE9SVDogDQoNCkZvciBmdXJ0aGVyIGluZm9ybWF0aW9uLCBjb250YWN0IEhQ
IFNlcnZpY2VzLg0KDQoNCg0KU1VCU0NSSUJFOiANCg0KVG8gc3Vic2NyaWJlIHRvIGF1dG9tYXRp
Y2FsbHkgcmVjZWl2ZSBmdXR1cmUNClNlY3VyaXR5IEFkdmlzb3JpZXMgZnJvbSB0aGUgU29mdHdh
cmUgU2VjdXJpdHkgUmVzcG9uc2UNClRlYW0gdmlhIGVsZWN0cm9uaWMgbWFpbDoNCg0KaHR0cDov
L3d3dy5zdXBwb3J0LmNvbXBhcS5jb20vcGF0Y2hlcy9tYWlsaW5nLWxpc3Quc2h0bWwgDQoNClJF
UE9SVDogVG8gcmVwb3J0IGEgcG90ZW50aWFsIHNlY3VyaXR5IHZ1bG5lcmFiaWxpdHkgd2l0aA0K
YW55IEhQIHN1cHBvcnRlZCBwcm9kdWN0LCBzZW5kIGVtYWlsIHRvOiBzZWN1cml0eS1hbGVydEBo
cC5jb20NCg0KQXMgYWx3YXlzLCBIUCB1cmdlcyB5b3UgdG8gcGVyaW9kaWNhbGx5IHJldmlldyB5
b3VyIHN5c3RlbQ0KbWFuYWdlbWVudCBhbmQgc2VjdXJpdHkgcHJvY2VkdXJlcy4gSFAgd2lsbCBj
b250aW51ZSB0byByZXZpZXcNCmFuZCBlbmhhbmNlIHRoZSBzZWN1cml0eSBmZWF0dXJlcyBvZiBp
dHMgcHJvZHVjdHMgYW5kIHdvcmsNCndpdGggb3VyIGN1c3RvbWVycyB0byBtYWludGFpbiBhbmQg
aW1wcm92ZSB0aGUgc2VjdXJpdHkgYW5kDQppbnRlZ3JpdHkgb2YgdGhlaXIgc3lzdGVtcy4gIA0K
IkhQIGlzIGJyb2FkbHkgZGlzdHJpYnV0aW5nIHRoaXMgU2VjdXJpdHkgQnVsbGV0aW4gaW4gb3Jk
ZXINCnRvIGJyaW5nIHRvIHRoZSBhdHRlbnRpb24gb2YgdXNlcnMgb2YgdGhlIGFmZmVjdGVkIEhQ
DQpwcm9kdWN0cyB0aGUgaW1wb3J0YW50IHNlY3VyaXR5IGluZm9ybWF0aW9uIGNvbnRhaW5lZA0K
aW4gdGhpcyBCdWxsZXRpbi4gSFAgcmVjb21tZW5kcyB0aGF0IGFsbCB1c2VycyBkZXRlcm1pbmUN
CnRoZSBhcHBsaWNhYmlsaXR5IG9mIHRoaXMgaW5mb3JtYXRpb24gdG8gdGhlaXIgaW5kaXZpZHVh
bA0Kc2l0dWF0aW9ucyBhbmQgdGFrZSBhcHByb3ByaWF0ZSBhY3Rpb24uIEhQIGRvZXMgbm90IHdh
cnJhbnQNCnRoYXQgdGhpcyBpbmZvcm1hdGlvbiBpcyBuZWNlc3NhcmlseSBhY2N1cmF0ZSBvciBj
b21wbGV0ZQ0KZm9yIGFsbCB1c2VyIHNpdHVhdGlvbnMgYW5kLCBjb25zZXF1ZW50bHksIEhQIHdp
bGwgbm90IGJlDQpyZXNwb25zaWJsZSBmb3IgYW55IGRhbWFnZXMgcmVzdWx0aW5nIGZyb20gdXNl
cidzIHVzZSBvcg0KZGlzcmVnYXJkIG9mIHRoZSBpbmZvcm1hdGlvbiBwcm92aWRlZCBpbiB0aGlz
IEJ1bGxldGluLiINCg0KqUNvcHlyaWdodCAyMDAyIEhld2xldHQtUGFja2FyZCBDb21wYW55IA0K
SGV3bGV0dC1QYWNrYXJkIENvbXBhbnkgc2hhbGwgbm90IGJlIGxpYWJsZSBmb3IgdGVjaG5pY2Fs
DQpvciBlZGl0b3JpYWwgZXJyb3JzIG9yIG9taXNzaW9ucyBjb250YWluZWQgaGVyZWluLiBUaGUN
CmluZm9ybWF0aW9uIGluIHRoaXMgZG9jdW1lbnQgaXMgc3ViamVjdCB0byBjaGFuZ2Ugd2l0aG91
dA0Kbm90aWNlLiBIZXdsZXR0LVBhY2thcmQgQ29tcGFueSBhbmQgdGhlIG5hbWVzIG9mDQpIZXds
ZXR0LVBhY2thcmQgcHJvZHVjdHMgcmVmZXJlbmNlZCBoZXJlaW4gYXJlIHRyYWRlbWFya3MNCm9m
IEhld2xldHQtUGFja2FyZCBDb21wYW55IGluIHRoZSBVbml0ZWQgU3RhdGVzIGFuZCBvdGhlcg0K
Y291bnRyaWVzLiBPdGhlciBwcm9kdWN0IGFuZCBjb21wYW55IG5hbWVzIG1lbnRpb25lZCBoZXJl
aW4NCm1heSBiZSB0cmFkZW1hcmtzIG9mIHRoZWlyIHJlc3BlY3RpdmUgb3duZXJzLg0KDQotLS0t
LUJFR0lOIFBHUCBTSUdOQVRVUkUtLS0tLQ0KVmVyc2lvbjogUEdQIDcuMC4xDQoNCmlRQS9Bd1VC
UG5ZSzNEblR1MmNrdmJGdUVRS0xBQUNncHFrQ1dwL1J3MjNZRjJjODFXVTVzSC8yWm1NQW9LNHYN
CmxwTGMyNVNFWkllRDkyWnZCaGZ1OG15aw0KPVNHUnENCi0tLS0tRU5EIFBHUCBTSUdOQVRVUkUt
LS0tLQ0K
---
You are currently subscribed to security as: vulq@securityfocus.com
To unsubscribe send a blank email to leave-security-21344T@list.support.compaq.com
---825423385-854593611-1048006893=:27759--
