Bugtraq mailing list archives
Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995
From: goetz () open ch (Goetz von Escher)
Date: Tue, 19 Sep 1995 23:54:42 -0600
On Sep 19, 4:33pm, Sten Gunterberg wrote:
There's no patch yet, but Sun is apparently working on one. The Bug-IDs are 1219835 for Solaris 1.x (SunOS 4.x) and 1220257 for Solaris 2.x. Try to give those to local Sun support and see what happens :-)
Solaris 2.x ??? - I thought this is a BSD problem? Are you telling me that *all* my Solaris boxes are vulnerable too? Also local Sun support told me that the patch for Bug 1219835 has been integrated into SunOS 4.1.4 and there probably won't be a patch for older versions! Here's the bug info they sent me: Bug Id: 1219835 Product: sunos Category: utility Subcategory: other Release summary: 4.1.3, 4.1.4, 4.1.3_U1, 4.1 Bug/Rfe: bug State: integrated But now I'm really getting confused when I read the mail by Andy Cowley who said: On Sep 19, 4:17pm, andy () btc uwe ac uk wrote:
- Is Sun working on a patch?yes." I have this problem logged with Sun. the latest (12:03 BST 19 Sept 95) is that T (test?) patches are available to existing fault call owners. If the problem is severe for you persuade Sun to send them. They are :- 4.1.3_U1 domestic libc = T101759-04 4.1.3_U1 international libc = T101558-07 4.1.4 domestic libc = T102544-03 4.1.4 international libc = T102545-03 These are betas and Sun will expect testing and a report.
So why would there be a test patch for SunOS 4.1.4 if it was fixed in that release? I guess one of you guys is wrong. -Goetz -- Goetz von Escher email: Goetz.von-Escher () Open CH Open Systems AG voice: +41 (61) 262-0505 Petersplatz 12 FAX: +41 (61) 262-0510 CH-4051 Basel, Switzerland
Current thread:
- Re: Livingston bugs..., (continued)
- Re: Livingston bugs... Mike A Lyons (Sep 12)
- LACC Julian Assange (Sep 13)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Charles Sumner (Sep 14)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Goetz von Escher (Sep 18)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Doug Hughes (Sep 18)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Scott Barman (Sep 18)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Karl Strickland (Sep 18)
- Netscape SSL implementation cracked! (fwd) sameer (Sep 18)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Paul Ashton (Sep 18)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 andy () btc uwe ac uk (Sep 19)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Goetz von Escher (Sep 19)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Ian MacPhedran (Sep 20)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Casper Dik (Sep 21)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Pat The Friendly RedNeck (Sep 22)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Casper Dik (Sep 25)
- Random seed (fwd) Darrell Fuhriman (Sep 25)
- Ray Cromwell: YET ANOTHER BAD NETSCAPE HOLE! Perry E. Metzger (Sep 22)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Sten Gunterberg (Sep 21)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 Jim Shankland (Sep 22)
- Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 andy () BTC UWE AC UK (Sep 25)