dUNIX OSF300-267 rpc.pcnfsd v3.0 ECO Summary
Copyright (c) Digital Equipment Corporation 1996. All rights reserved.
PRODUCT: Digital UNIX [R]
COMPONENT: rpc.pcnfsd
SOURCE: Digital Equipment Corporation
ECO INFORMATION:
ECO Kit Name: OSF300-267
ECO Kits Superseded by This ECO Kit: N/A
ECO Kit Approximate Size: 118 Blocks
60626 Bytes
Kit Applies To: Digital UNIX, Version 3.0
System/Cluster Reboot Necessary: No
ECO KIT SUMMARY:
An ECO kit exists for Digital UNIX version 3.0. This kit addresses
the following problem:
o A potential security vulnerability has been discovered in the
rpc.pcnfsd program, where under certain circumstances users may
gain unauthorized access. Digital has corrected this potential
vulnerability. All customers should install this patch.
INSTALLATION NOTES:
This patch contains the following inventory:
/usr/sbin/rpc.pcnfsd subset OSFNFS300
CHECKSUM: 04688 56 RCSfile: pcnfsd_misc.c RCS: 1.1.18.2
RCSfile: pcnfsd_print.c RCS: 1.1.17.2
The following instructions assume the OSF300-267.d.tar.Z patch compressed tar
file is in directory /tmp.
As superuser, do:
# cd /tmp
# uncompress -d OSF300-267.d.tar.Z
# tar xpvf OSF300-267.d.tar
Patch files and cover letter are in subdirectory /tmp/patches/OSF300-267.
Shutdown the system to single-user mode.
kill rpc.pcnfsd if it is running.
# cd /usr/sbin
# cp -p rpc.pcnfsd rpc.pcnfsd.pre..OSF300-267
# cp -p /tmp/patches/rpc.pcnfsd rpc.pcnfsd.new
# chmod 755 rpc.pcnfsd.new
# chown bin:bin rpc.pcnfsd.new
# ln rpc.pcnfsd rpc.pcnfsd.orig
# mv rpc.pcnfsd.new rpc.pcnfsd
restart rpc.pcnfsd as root.
# cd /usr/sbin
# rpc.pcnfsd &
[R] UNIX is a registered trademark in the United States and other countries
licensed exclusively through X/Open Company Limited.
This patch can be found at any of these sites:
Colorado Site
Georgia Site
European Site
Files on this server are as follows:
osf300-267_d.README
osf300-267_d.CHKSUM
osf300-267_d.CVRLET_TXT
osf300-267_d.tar_z