|
![](http://thenew.hp.com/img/s.gif) |
![Content starts here](http://thenew.hp.com/img/s.gif)
SSRT0615U_DTACTION Tru64 UNIX - Potential Security Problem when using dtaction
|
Tru64 UNIX - Potential Security Problem when using dtaction.
TITLE: SSRT0615U_DTACTION Tru64 UNIX - Potential Security Problem when
using dtaction
Updated Customer Advisory for SSRT0615U, dtaction
* No Restrictions For Distribution *
__________________________________________________________
UPDATE: OCT. 15, 1999
Original Posting: AUG. 23, 1999
TITLE: Tru64 UNIX - Potential Security Problem when using dtaction.
X-REF: - CERT(R) Advisory CA-1999-11, CIAC Bulletin K-001
Four Vulnerabilities in the Common Desktop Environment
*UPDATE: Availability of Tru64 UNIX V5.0 patch
SOURCE: Compaq Computer Corporation
Software Security Response Team
"Compaq is broadly distributing this Security Advisory in order
to bring to the attention of users of Compaq products the
important security information contained in this Advisory.
Compaq recommends that all users determine the applicability of
this information to their individual situations and take
appropriate action.
Compaq does not warrant that this information is necessarily
accurate or complete for all user situations and, consequently,
Compaq will not be responsible for any damages resulting from
user's use or disregard of the information provided in this
Advisory."
----------------------------------------------------------------------
IMPACT:
This fix was implemented in response to a recent report of
dtaction buffer overflow.
----------------------------------------------------------------------
RESOLUTION:
This potential security problem has been resolved and a
patch for this problem has been made available for
Tru64 UNIX V4.0D, V4.0E, V4.0F and V5.0.
This patch can be installed on:
V4.0D Patch kit BL11, BL12 or BL13.
V4.0E Patch kit BL1 or BL12.
V4.0F Patch kit BL1.
V5.0
*This solution will be included in a future distributed release of
Compaq's Tru64 UNIX.
This patch may be obtained from the World Wide Web at the
following FTP address:
http://www.support.compaq.com/patches
Patch file name: SSRT0615U_dtaction.tar
Use the FTP access option, select DIGITAL_UNIX directory
then choose the appropriate version directory and
download the patch accordingly.
NOTE: There is a README file included with this patch, which
contains installation instructions.
Additional Considerations:
If you need further information, please contact your normal
Compaq Services support channel.
Compaq appreciates your cooperation and patience. We regret any
inconvenience applying this information may cause.
As always, Compaq urges you to periodically review your system
management and security procedures.
Compaq will continue to review and enhance the security
features of its products and work with customers to maintain and
improve the security and integrity of their systems.
__________________________________________________________
Copyright (c) Compaq Computer Corporation, 1999 All
Rights Reserved.
Unpublished Rights Reserved Under The Copyright Laws Of
The United States.
__________________________________________________________
Files on this server are as follows:
|
»ssrt0615u_dtaction.README
»ssrt0615u_dtaction.CHKSUM
»ssrt0615u_dtaction.tar
|