Patch-ID# 108760-02 Keywords: security rpcbind denial service transport RPC Synopsis: SunOS 5.7: /usr/sbin/rpcbind patch Date: Sep/18/2002 Install Requirements: Reboot after installation Solaris Release: 7 SunOS Release: 5.7 Unbundled Product: Unbundled Release: Xref: Topic: SunOS 5.7: /usr/sbin/rpcbind patch NOTE: Refer to Special Install Instructions section for IMPORTANT specific information on this patch. Relevant Architectures: sparc BugId's fixed with this patch: 1226166 4124715 4690775 Changes incorporated in this version: 1226166 4690775 Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: 106942-23 or greater Obsoleted by: Files included with this patch: /usr/sbin/rpcbind Problem Description: 1226166 rpcbind does not bind with the correct network interface 4690775 nisplus_ldap_udt: rpcbind got killed and core dump during nisplus server setup (from 108760-01) 4124715 Denial of Service in connection oriented transports. Patch Installation Instructions: -------------------------------- For Solaris 2.0-2.6 releases, refer to the Install.info file and/or the README within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. For Solaris 7-9 releases, refer to the man pages for instructions on using 'patchadd' and 'patchrm' scripts provided with Solaris. Any other special or non-generic installation instructions should be described below as special instructions. The following example installs a patch to a standalone machine: example# patchadd /var/spool/patch/104945-02 The following example removes a patch from a standalone system: example# patchrm 104945-02 For additional examples please see the appropriate man pages. Special Install Instructions: ----------------------------- Reboot the system after patch installation. NOTE 1: To get the complete fix for bug 4124715 (DENIAL OF SERVICE IN CONNECTION ORIENTED TRANSPORTS), one also needs to install the following patches: 106942-09 (or newer) libnsl & rpc.nisd 107477-03 (or newer) /usr/lib/nfs/mountd 108551-03 (or newer) /usr/sbin/rpc.nispasswdd 108748-01 (or newer) /usr/lib/nfs/statd 108750-01 (or newer) /usr/lib/netsvc/yp/ypbind 108752-01 (or newer) /usr/lib/netsvc/yp/ypserv 108754-01 (or newer) /usr/lib/netsvc/yp/ypxfrd 108756-01 (or newer) /usr/lib/netsvc/yp/rpc.ypupdated 108758-01 (or newer) /usr/sbin/keyserv 108762-01 (or newer) /usr/sbin/rpc.nisd_resolv 108764-01 (or newer) /usr/sbin/rpc.bootparamd NOTE 2: In order to obtain the complete fix for bugid 1226166 (rpcbind does not bind with the correct network interface), Patch 106942-23 or newer must also be installed on the system. README -- Last modified date: Wednesday, September 18, 2002