Patch-ID# 105165-04 Keywords: security ypbind rpcbind ypbind.pid diskless clients lookup Synopsis: SunOS 5.5.1: /usr/lib/netsvc/yp/ypbind patch Date: Jun/19/2001 Solaris Release: 2.5.1 SunOS Release: 5.5.1 Unbundled Product: Unbundled Release: Xref: This patch available for x86 as patch 105166 Topic: SunOS 5.5.1: /usr/lib/netsvc/yp/ypbind patch NOTE: Refer to Special Install Instructions section for IMPORTANT specific information on this patch. Relevant Architectures: sparc BugId's fixed with this patch: 1225430 4080264 4124715 4362647 Changes incorporated in this version: 4362647 Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: Obsoleted by: Files included with this patch: usr/lib/netsvc/yp/ypbind Problem Description: 4362647 ypbind has a remotely exploitable buffer overflow allowing root privileges (from 105165-03) 4124715 Denial of Service in connection oriented Transports. (from 105165-02) 4080264 ypbind.pid file not created for diskless clients (from 105165-01) 1225430 ypbind can get requests before it is ready for them Patch Installation Instructions: -------------------------------- Refer to the Install.info file within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. Any other special or non-generic installation instructions should be described below. Special Install Instructions: ----------------------------- NOTE 1: To get complete fix for bugid for 1225430 (ypbind can get requests before it is ready for them), one also needs to install the libnsl patch (103612-32 or newer). NOTE 2: To get complete fix for bugid for 4080264 (ypbind.pid file not created for diskless clients), one also needs to install the libnsl patch (103612-35 or newer). NOTE 3: To get the complete fix for bug 4124715 (Denial of Service in connection oriented Transports) we recommend installation of the following patches (or newer): 103640-33 (libnsl & rpc.nisd) 103995-02 (/usr/sbin/rpc.nispasswdd) 108928-01 (/usr/sbin/rpc.bootparamd) 103686-03 (/usr/sbin/rpc.nisd_resolv) 104331-08 (/usr/sbin/rpcbind) 105133-02 (/usr/sbin/keyserv) 104166-05 (/usr/lib/nfs/statd) 104220-04 (/usr/lib/nfs/mountd) README -- Last modified date: Tuesday, June 19, 2001