OBSOLETE Patch-ID# 109329-03
Keywords: security ypserv ypxfr clnt_call ypserv_resolv ypxfrd map handling
Synopsis: Obsoleted by: 109329-04 SunOS 5.8_x86: ypserv, ypxfr and ypxfrd patch
Date: Oct/29/2002


Install Requirements: Reboot after installation                      
                      
Solaris Release: 8_x86

SunOS Release: 5.8_x86

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for SPARC as patch 109328

Topic: SunOS 5.8_x86: ypserv, ypxfr and ypxfrd patch

Relevant Architectures: i386

BugId's fixed with this patch: 4203989 4373365 4737417

Changes incorporated in this version: 4737417

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/lib/netsvc/yp/ypserv
/usr/lib/netsvc/yp/ypxfr
/usr/lib/netsvc/yp/ypxfrd

Problem Description:

4737417 ypxfrd security issue with map handling
 
(from 109329-02)
 
4373365 ypserv responds on the incorrect port
 
(from 109329-01)
 
4203989 ypserv on SS20 with 100 meg card running Solaris 7 or higher spawns hundreds of ypserv processes

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
 
None.

README -- Last modified date:  Tuesday, August 24, 2004

