OBSOLETE Patch-ID# 105403-04
Keywords: security ypbind ypbind.pid diskless clients lookup rpcbind
Synopsis: Obsoleted by: 108890-02 SunOS 5.6: ypbind/ypserv patch
Date: Jun/19/2001

Install Requirements: See Special Install Instructions                      
                      
Solaris Release: 2.6

SunOS Release: 5.6

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 105404

Topic: SunOS 5.6: ypbind/ypserv patch
	NOTE:	Refer to Special Install Instructions section for 
                IMPORTANT specific information on this patch.

Relevant Architectures: sparc

BugId's fixed with this patch: 1225430 4080264 4105286 4124715 4362647

Changes incorporated in this version: 4362647

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 108890-02

Files included with this patch: 

/usr/lib/netsvc/yp/ypbind
/usr/lib/netsvc/yp/ypserv

Problem Description:

4362647 ypbind has a remotely exploitable buffer overflow allowing root privileges
 
(from 105403-03)
 
4124715 Denial of Service in connection oriented Transports.
 
(from 105403-02)
 
4105286 NIS master with DNS forwarding mode will hang up during system-reboot
 
(from 105403-01)
 
4080264 ypbind.pid file not created for diskless clients
1225430 ypbind can get requests before it is ready for them

Patch Installation Instructions:
-------------------------------- 
Refer to the Install.info file within the patch for instructions on
using the generic 'installpatch' and 'backoutpatch' scripts provided
with each patch.  Any other special or non-generic installation
instructions should be described below.

Special Install Instructions:
----------------------------- 
 
	NOTE1:  To get the complete fix for 1225430 (ypbind can get
                requests before it is ready for them) and 4080264
                (ypbind.pid file not created for diskless clients),
                one needs to install 105401-02 (or newer).
 
        NOTE2:  To get the complete fix for bug 4124715 (Denial of Service in
                connection oriented Transports) we recommend installation of
                the following patches (or newer):
 
                105401-28       (libnsl & rpc.nisd)
                108346-03       (/usr/sbin/rpc.nispasswdd)
                108895-01       (/usr/sbin/rpc.bootparamd)
                108893-01       (/usr/lib/netsvc/yp/rpc.ypupdated)
                108890-01       (/usr/lib/netsvc/yp/ypxfrd)
                105552-03       (/usr/sbin/rpc.nisd_resolv)
                105216-04       (/usr/sbin/rpcbind)
                108307-02       (/usr/sbin/keyserv)
                106592-03       (/usr/lib/nfs/statd)
                105615-08       (/usr/lib/nfs/mountd)

README -- Last modified date:  Friday, November 8, 2002