topic Re: CERT Advisory CA-2001-32 Buffer Overflow in HP-UX Line Printer Daemon in Operating System - HP-UX

CERT Advisory CA-2001-32 Buffer Overflow in HP-UX Line Printer Daemon

Steven Sim Kok Leong — Thu, 22 Nov 2001 01:40:57 GMT

Re: CERT Advisory CA-2001-32 Buffer Overflow in HP-UX Line Printer Daemon

Steven Sim Kok Leong — Thu, 22 Nov 2001 01:44:10 GMT

Hi,

As a side note, you will need to restart your inetd daemon everytime you make changes to /etc/inetd.conf so that the changes take effect ie.

# /sbin/init.d/inetd stop
# /sbin/init.d/inetd start

Hope this helps. Regards.

Steven Sim Kok Leong
Brainbench MVP for Unix Admin
http://www.brainbench.com

Re: CERT Advisory CA-2001-32 Buffer Overflow in HP-UX Line Printer Daemon

Bill Hassell — Thu, 22 Nov 2001 03:49:40 GMT

With most daemons, services and applications, using start/stop in the /sbin/init.d is the preferred method. However, inetd is one of the few that knows how to re-read it's config files on the fly. You can use: inetd -c

Re: CERT Advisory CA-2001-32 Buffer Overflow in HP-UX Line Printer Daemon

Steven Sim Kok Leong — Thu, 22 Nov 2001 03:56:48 GMT

Hi Bill,

Yes, you are definitely right. The -c option is the ideal way of updating inetd configuration.

Can't believe it actually slipped my mind :) Thanks for pointing it out.

Regards.

Steven Sim Kok Leong
Brainbench MVP for Unix Admin
http://www.brainbench.com

Re: CERT Advisory CA-2001-32 Buffer Overflow in HP-UX Line Printer Daemon

Charles Cox — Thu, 20 Dec 2001 15:49:29 GMT

Unfortunately I have been unable to locate the patch name or location for download within HP. I would be greatly appreciative if someone could provide me with this information.

Thanks,
Chuck
cmcox@ucwv.edu

Re: CERT Advisory CA-2001-32 Buffer Overflow in HP-UX Line Printer Daemon

Steven Sim Kok Leong — Wed, 26 Dec 2001 03:36:48 GMT

Hi,

The patch is listed on the HP-UX Security Bulletin HPSBUX0111-176:

http://www.kb.cert.org/vuls/id/IAFY-54PKL4

The patches accordingly are:

10.01 PHCO_25107
10.01 PHCO_25107
10.10 PHCO_25108
10.20 PHCO_25109
11.00 PHCO_25110
11.11 PHCO_25111

NOTE: HP-UX 10.24 and 11.04 (VVOS) are not vulnerable.

Hope this helps. Regards.

Steven Sim Kok Leong
Brainbench MVP for Unix Admin
http://www.brainbench.com