SSRT3596 - rpc.mountd leaks information

[Berlene Herren]

=================================================================
A security bulletin has been issued:

-----------------------------------------------------------------
Source: HEWLETT-PACKARD COMPANY
SECURITY BULLETIN: HPSBUX0308-272
Originally issued: 03 August 2003
SSRT3596 - rpc.mountd leaks information

-----------------------------------------------------------------

To access the bulletin from the itrc:

Select "maintenance and support"
Select "search technical knowledge base"
Select "HP-UX Software Security Bulletins"
Select "Search by Security Bulletin Number"
Enter "HPSBUX0308-272"
Search

The complete list of security bulletins can be found here:

http://itrc.hp.com/cki/bin/doc.pl/screen=ckiSecurityBulletin
=================================================================

Berlene

[Ray Carlson]

I have succesfully installed this on my HP-UX 11.00 systems. However, NFS would no longer work after installing the rpc.mountd on my HP-UX 11.22 systems and I had to back off the change. I have opened a trouble ticket with HP and will post when the issue is resolved.

[Ray Carlson]

HP has now replaced the rpc.mountd binary, for the 11.22 systems, on thier ftp site. I have installed the new binary and it does work. The correct binary is rpc.mountd.11.22.r1.