Patch-ID# 103708-03 Keywords: security rpc.nisd_resolv BIND 4.9.3 libresolv.so.2 YP caches DNS Synopsis: SunOS 5.5: /usr/sbin/rpc.nisd_resolv patch Date: Apr/24/2001 Solaris Release: 2.5 SunOS Release: 5.5 Unbundled Product: Unbundled Release: Xref: This patch available for x86 as patch 103709 Topic: SunOS 5.5: /usr/sbin/rpc.nisd_resolv patch NOTE: Refer to Special Install Instructions Section for IMPORTANT specific information on this patch. Relevant Architectures: sparc BugId's fixed with this patch: 1231599 1253598 4124715 Changes incorporated in this version: 4124715 Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: 103667-01 or greater Obsoleted by: Files included with this patch: /usr/sbin/rpc.nisd_resolv Problem Description: 4124715 Denial of Service in connection oriented Transports. (from 103708-02) 1231599 YP caches host info for too long and does not honor the refresh times from DNS (from 103708-01) 1253598 rpc.nisd_resolv source modifications and rebuild for BIND 4.9.3 Patch Installation Instructions: -------------------------------- Refer to the Install.info file within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. Any other special or non-generic installation instructions should be described below. Special Install Instructions: ----------------------------- NOTE1: This patch requires the sparc libresolv.so.2/BIND 4.9.3 patch, 103667-01, or newer, to be installed on the target system. It is recommended to install the following patches: 102980-07 (or newer) sendmail patch 103279-02 (or newer) nscd/nscd_nischeck rebuild for BIND 4.9.3 103703-01 (or newer) nss_dns.so.1 rebuild for BIND 4.9.3 NOTE2: To get the complete fix for bug 4124715 (DENIAL OF SERVICE IN CONNECTION ORIENTED TRANSPORTS), one also needs to install the following patches: 103187-44 (or newer) libc, libnsl, libucb, nis_cachemgr and rpc.nisd patch 103468-05 (or newer) /usr/lib/nfs/statd patch 105169-03 (or newer) /usr/lib/netsvc/yp/ypbind patch 104357-07 (or newer) /usr/sbin/rpcbind patch 104223-03 (or newer) /usr/lib/nfs/mountd patch 104000-02 (or newer) /usr/sbin/rpc.nispasswdd patch 108647-01 (or newer) /usr/sbin/keyserv patch 108649-01 (or newer) /usr/sbin/rpc.bootparamd patch README -- Last modified date: Tuesday, April 24, 2001