CERT Advisory CA-2001-32 Buffer Overflow in HP-UX Line Printer Daemon

[Steven Sim Kok Leong]

Hi,

As a side note, you will need to restart your inetd daemon everytime you make changes to /etc/inetd.conf so that the changes take effect ie.

# /sbin/init.d/inetd stop
# /sbin/init.d/inetd start

Hope this helps. Regards.

Steven Sim Kok Leong
Brainbench MVP for Unix Admin
http://www.brainbench.com

[Bill Hassell · Accepted solution]

With most daemons, services and applications, using start/stop in the /sbin/init.d is the preferred method. However, inetd is one of the few that knows how to re-read it's config files on the fly. You can use: inetd -c

[Steven Sim Kok Leong]

Hi Bill,

Yes, you are definitely right. The -c option is the ideal way of updating inetd configuration.

Can't believe it actually slipped my mind :) Thanks for pointing it out.

Regards.

Steven Sim Kok Leong
Brainbench MVP for Unix Admin
http://www.brainbench.com

[Charles Cox]

Unfortunately I have been unable to locate the patch name or location for download within HP. I would be greatly appreciative if someone could provide me with this information.

Thanks,
Chuck
cmcox@ucwv.edu

[Steven Sim Kok Leong]

Hi,

The patch is listed on the HP-UX Security Bulletin HPSBUX0111-176:

http://www.kb.cert.org/vuls/id/IAFY-54PKL4

The patches accordingly are:

10.01 PHCO_25107
10.01 PHCO_25107
10.10 PHCO_25108
10.20 PHCO_25109
11.00 PHCO_25110
11.11 PHCO_25111

NOTE: HP-UX 10.24 and 11.04 (VVOS) are not vulnerable.

Hope this helps. Regards.

Steven Sim Kok Leong
Brainbench MVP for Unix Admin
http://www.brainbench.com