Patch-ID# 108750-02
Keywords: security ypbind denial service transport RPC
Synopsis: SunOS 5.7: /usr/lib/netsvc/yp/ypbind patch
Date: Jun/19/2001

Solaris Release: 7

SunOS Release: 5.7

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 108751

Topic: SunOS 5.7: /usr/lib/netsvc/yp/ypbind patch
	NOTE:  Refer to Special Install Instructions section for 
               IMPORTANT specific information on this patch.

Relevant Architectures: sparc

BugId's fixed with this patch: 4124715 4362647

Changes incorporated in this version: 4362647

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/lib/netsvc/yp/ypbind

Problem Description:

4362647 ypbind has a remotely exploitable buffer overflow allowing root privileges
 
(from 108750-01)
 
4124715 Denial of Service in connection oriented Transports.

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-8 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
----------------------------- 
 
        NOTE :    To get the complete fix for bug 4124715 (DENIAL OF SERVICE
                  IN CONNECTION ORIENTED TRANSPORTS), one also needs to install
                  the following patches:
 
                        106942-09  (or newer)   libnsl & rpc.nisd
                        107477-03  (or newer)   /usr/lib/nfs/mountd
                        108551-03  (or newer)   /usr/sbin/rpc.nispasswdd
                        108748-01  (or newer)   /usr/lib/nfs/statd
                        108752-01  (or newer)   /usr/lib/netsvc/yp/ypserv
                        108754-01  (or newer)   /usr/lib/netsvc/yp/ypxfrd
                        108756-01  (or newer)   /usr/lib/netsvc/yp/rpc.ypupdated
                        108758-01  (or newer)   /usr/sbin/keyserv
                        108760-01  (or newer)   /usr/sbin/rpcbind
                        108762-01  (or newer)   /usr/sbin/rpc.nisd_resolv
                        108764-01  (or newer)   /usr/sbin/rpc.bootparamd

README -- Last modified date:  Tuesday, June 19, 2001

