Single Logical Screen daemon

Bing Wong — Thu, 22 Feb 2007 17:59:07 GMT

I got this from AT&T...
A vulnerability has been reported in HP-UX, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to a design error in the Single Logical Screen daemon (SLSd) and can be exploited to create or overwrite arbitrary files with superuser privileges via a specially crafted packet sent to the daemon. Successful exploitation allows execution of arbitrary code by e.g. overwriting .rhosts, cron scripts, or other files used for authentication. The vulnerability is reported in versions 11.11i and 10.20. Other versions may also be affected.

HP told me to apply these patches:
CDE Base patch: PHSS_354249
CDE Application patch: PHSS_35343

Since I am not a full time system admin, can anyone tell me how to check if my HP-UX has CDE running? Thank you very much.

Re: Single Logical Screen daemon

Manohar Manne_1 — Fri, 23 Feb 2007 13:22:07 GMT

check dttlogin or dtterm process

Re: Single Logical Screen daemon

Bing Wong — Fri, 23 Feb 2007 13:30:20 GMT

I have it running. Thanks.

root@hrisdev1:/root # ps -ef|grep dtl
root 2672 2650 1 10:24:53 pts/td 0:00 grep dtl
root 3465 3409 0 Feb 18 ? 0:00 /usr/dt/bin/dtlogin

Re: Single Logical Screen daemon

Bing Wong — Fri, 23 Feb 2007 13:36:23 GMT

Thank you Manohar

topic Single Logical Screen daemon in Operating System - HP-UX

Single Logical Screen daemon

Re: Single Logical Screen daemon

Re: Single Logical Screen daemon

Re: Single Logical Screen daemon