Patch-ID# 108551-03
Keywords: security rpc.nispasswdd shadow verifier
Synopsis: SunOS 5.7: /usr/sbin/rpc.nispasswdd patch
Date: Dec/15/2000

Solaris Release: 7

SunOS Release: 5.7

Unbundled Product: 

Unbundled Release: 

Xref: 

Topic: SunOS 5.7: /usr/sbin/rpc.nispasswdd patch
NOTE:  	Refer to Special Install Instructions section for 
	IMPORTANT specific information on this patch.

Relevant Architectures: sparc

BugId's fixed with this patch: 4124715 4238754 4246959

Changes incorporated in this version: 4124715

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/sbin/rpc.nispasswdd

Problem Description:

4124715 Denial of Service in connection oriented transports.
 
(from 108551-02)
 
4246959 rpc.nispasswdd leaks memory during normal use
 
(from 108551-01)
 
4238754 rpc.nispasswdd loses ability to update shadow field

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7 release, refer to the man pages for instructions on
using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
----------------------------- 
 
	NOTE 1:   To get the complete fix for 4246959 (rpc.nispasswdd 
	 	  leaks memory during normal use) you also need to install
		  the following patch:
 
	      		106942-08 libnsl, rpc.nisd, nis_cachemgr patch 
 
	NOTE 2:   To get the complete fix for bug 4124715 (DENIAL OF
		  SERVICE IN CONNECTION ORIENTED TRANSPORTS), one also
		  needs to install the following patches:
 
			106942-09  (or newer)	libnsl & rpc.nisd
			107477-03  (or newer)   /usr/lib/nfs/mountd 
			108748-01  (or newer)	/usr/lib/nfs/statd
			108750-01  (or newer)	/usr/lib/netsvc/yp/ypbind
			108752-01  (or newer)	/usr/lib/netsvc/yp/ypserv
			108754-01  (or newer)	/usr/lib/netsvc/yp/ypxfrd
			108756-01  (or newer)	/usr/lib/netsvc/yp/rpc.ypupdated
			108758-01  (or newer)	/usr/sbin/keyserv
			108760-01  (or newer)	/usr/sbin/rpcbind
			108762-01  (or newer)	/usr/sbin/rpc.nisd_resolv
			108764-01  (or newer)	/usr/sbin/rpc.bootparamd

README -- Last modified date:  Friday, December 15, 2000

