RPC security

[Steve Bear_1]

we have recently received security warning for windows servers ( CAN-2003-0528 Microsoft Windows is vulnerable to two buffer overflows, caused by improper handling of Remote Procedure Call (RPC) messages for Distributed Component Object Model (DCOM) activation by the RPCSS service.)

I was just wondering are there any recent scurity issues related to RPC on HPUX 11.11 platform.

Any suggestion?

[Brian Bergstrand]

There was a bug in the RPC server that saw the light of day with the first of these MS RPC holes a few months ago. The RPC server could crash because so many zombie hosts were hitting it looking to propogate the worm, this would cause a DoS on UX. There was a patch released to fix the problem, although I can't remember the # off the top of my head.

HTH.

[Robert-Jan Goossens]

Hi Steve,

The latest security bulletin for rpc is from 08-2003, take a look.

http://www5.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0308-272

http://www5.itrc.hp.com/service/cki/secBullArchive.do

Regards,
Robert-Jan.

[Brian Bergstrand · Accepted solution]

Found the patches:

Security doc id: HPSBUX0308-274

Patch: PHSS_29645