TITLE: SSRT0615U_DTACTION Tru64 UNIX - Potential Security Problem when 
       using dtaction
 
 
           Updated Customer Advisory for SSRT0615U, dtaction

                * No Restrictions For Distribution *
 
__________________________________________________________
UPDATE:                                        OCT. 15, 1999
Original Posting:                              AUG. 23, 1999   
 

TITLE:  Tru64 UNIX -  Potential Security Problem when using dtaction.

  X-REF: - CERT(R) Advisory CA-1999-11,  CIAC Bulletin K-001
                  Four Vulnerabilities in the Common Desktop Environment
 
  *UPDATE: Availability of Tru64 UNIX V5.0 patch

SOURCE: Compaq Computer Corporation
        Software Security Response Team 
 
"Compaq is broadly distributing this Security Advisory in order
 to bring to the attention of users of Compaq products the
 important security information contained in this Advisory. 
 Compaq recommends that all users determine the applicability of
 this information to their individual situations and take
 appropriate action.
 
 Compaq does not warrant that this information is necessarily
 accurate or complete for all user situations and, consequently,
 Compaq will not be responsible for any damages resulting from
 user's use or disregard of the information provided in this
 Advisory."
 
----------------------------------------------------------------------
IMPACT:
                                                                       
 This fix was implemented in response to a recent report of
 dtaction buffer overflow. 
 
----------------------------------------------------------------------
RESOLUTION:  
 
This potential security problem has been resolved and a
patch for this problem has been made available for 
Tru64 UNIX V4.0D, V4.0E, V4.0F and V5.0.
 
 This patch can be installed on:
 V4.0D  Patch kit BL11, BL12 or BL13.
 V4.0E  Patch kit BL1 or BL12.
 V4.0F  Patch kit BL1. 
 V5.0  
 
 *This solution will be included in a future distributed release of 
  Compaq's  Tru64 UNIX. 
  
  This patch may be obtained from the World Wide Web at the
  following FTP address:
 
       http://www.support.compaq.com/patches
 
 Patch file name: SSRT0615U_dtaction.tar
 
 Use the FTP access option, select DIGITAL_UNIX directory
 then choose the appropriate version directory and
 download the patch accordingly. 
 
 NOTE:  There is a README file included with this patch, which
        contains installation instructions.
 
 Additional Considerations:
 
   If you need further information, please contact your normal 
   Compaq Services support channel.
 
   Compaq appreciates your cooperation and patience. We regret any
   inconvenience applying this information may cause.
 
   As always, Compaq urges you to periodically review your system
   management and security procedures. 
 
   Compaq will continue to review and enhance the security
   features of its products and work with customers to maintain and
   improve the security and integrity of their systems.
 
  __________________________________________________________ 
  Copyright (c) Compaq Computer Corporation, 1999 All
  Rights Reserved.
  Unpublished Rights Reserved Under The Copyright Laws Of
  The United States.
  __________________________________________________________