topic Re: SUN's xdrmem_getbytes( ) function integer overflow vulnerability patching in Operating System - HP-UX

SUN's xdrmem_getbytes( ) function integer overflow vulnerability patching

Chern Jian Leaw — Mon, 05 May 2003 03:36:17 GMT

HI,
Could anyone tell me what would be the impact when patches for the xdrmem_getbytes( ) Integer Overflow vulnerabilty are applied?

Are there any changes after the patch? If there are changes, are they transparent to the users?

I've tried searching around for information with regards to the impact/results when the patch is applied but found none in CERT or in securitytracker.com. Most of these sites's have posted impacts on the vulnerability, but nothing about the changes/impact when the patch is applied.

Could someone kindly enlighten me what are the changes(if any) after the patch is applied?

Thanks

Re: SUN's xdrmem_getbytes( ) function integer overflow vulnerability patching

Michael Tully — Mon, 05 May 2003 03:49:58 GMT

You might try the sun forums. One of these links might help.

http://forum.sun.com/
http://supportforum.sun.com/
http://www.sun.com/bigadmin/
www.sunmanagers.org

Re: SUN's xdrmem_getbytes( ) function integer overflow vulnerability patching

Robert-Jan Goossens — Mon, 05 May 2003 07:34:42 GMT

Hi,

You better start you search here,

https://osc-emea.eu.sun.com/OSCSW/svcportal

Hope it helps,

Robert-Jan.

Re: SUN's xdrmem_getbytes( ) function integer overflow vulnerability patching

Zeev Schultz — Mon, 05 May 2003 13:26:59 GMT

Well,this is hp doc for what to do:

http://www5.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000067909365
and there are no patches yet for HP-UX.
Imho,libc and libnsl are replaced there.

Regards,

Zeev