OBSOLETE Patch-ID# 110058-02
Keywords: security login.krb5 chdir ftpd
Synopsis: Obsoleted by: 110058-03 SEAM 1.0_x86: Patch for Solaris 2.6_x86 / 7_x86
Date: Aug/20/2001

Solaris Release: 2.6_x86 7_x86

SunOS Release: 5.6_x86 5.7_x86

Unbundled Product: Solaris Enterprise Authentication Mechanism

Unbundled Release: 1.0

Xref: This patch available for SPARC as patch 110057

Topic: 

Relevant Architectures: i386

BugId's fixed with this patch: 4310410 4310415 4310420 4451327

Changes incorporated in this version: 4451327

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/krb5/lib/ftpd
/usr/krb5/lib/login.krb5
/usr/krb5/lib/rshd

Problem Description:

4451327 krb5 ftpd vulnerable to buffer overflows
 
(from 110058-01)
4310415 kerberized rshd fails with non-root-accessible home directories
4310420 kerberized ftpd fails to chdir to non-root-accessible home directories
4310410 login.krb5 chdir to non-root-accessible home directories fails for rlogin/telnet

Patch Installation Instructions:
-------------------------------- 
Refer to the Install.info file for instructions on using the
generic 'installpatch' and 'backoutpatch' scripts provided with
each patch.  Any other special or non-generic installation
instructions should be described below as special instructions.

Special Install Instructions:
----------------------------- 
 
None.

README -- Last modified date:  Wednesday, September 12, 2001

