Patch-ID# 106049-05
Keywords: security in.telnetd BANNER
Synopsis: SunOS 5.6: /usr/sbin/in.telnetd patch
Date: Mar/31/2003

Install Requirements: None                      
Solaris Release: 2.6

SunOS Release: 5.6

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 106050

Topic: SunOS 5.6: /usr/sbin/in.telnetd patch

Relevant Architectures: sparc

BugId's fixed with this patch: 4082063 4225958 4366956 4375449 4483514 4516876 4523990 4527873 4798177

Changes incorporated in this version: 4225958 4798177

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/sbin/in.telnetd

Problem Description:

4225958 in.telnetd core dumps
4798177 in.telnetd is vulnerable to denial of service via TESO
 
(from 106049-04)
 
4483514 in.telnetd vulnerable to buffer overflow ??
4523990 in.telnetd needs some cleanup
4527873 telnetd issues garbage before login prompt if BANNER in use
 
(from 106049-03)
 
4516876 in.telnetd should not accept TTYPROMPT from remote
 
(from 106049-02)
 
4366956 NLSPATH gettext introduces problems when used printf format specifier
4375449 dtmail crashes when calling catgets with NULL default message
 
(from 106049-01)
 
4082063 telnetd BANNER option security problem

Patch Installation Instructions:
--------------------------------
Refer to the Install.info file within the patch for instructions on
using the generic 'installpatch' and 'backoutpatch' scripts provided
with each patch.  Any other special or non-generic installation
instructions should be described below.

Special Install Instructions:
-----------------------------
 
         NOTE:    To get the complete fix for 4366956 (NLSPATH gettext
                  introduces problems when used printf format specifier),
                  we recommend installing the following patches:
 
                  107991-02 (or newer)   /usr/sbin/static/rcp patch
 
                  105210-36 (or newer)   /usr/lib/libc.a
                                         /usr/lib/libc.so.1
                                         /usr/lib/libp/libc.a
                                         /usr/lib/pics/libc_pic.a
 
                  105722-07 (or newer)   /usr/sbin/ufsrestore

README -- Last modified date:  Monday, March 31, 2003