Re: Getpwnam bus error.. is this patched?

[casper () HOLLAND SUN COM (Casper Dik)]

> I'm a little behind in the patches.  This program dies on Solaris 2.5;
> is this already patched, or is it news that getpwnam() has an
> overflowable buffer?


Old news (similar patches exist for 2.5 and for x86 2.5 & 2.5.1)

Patch-ID# 103612-23
Keywords: security libc memory su getdate NIS+ libnsl nis_cachemgr rpc.nisd NIS+
Synopsis: SunOS 5.5.1: libc, libnsl, nis_cachemgr and rpc.nisd patch
Date: Apr/21/97

.....


(from 103612-06)

1262666 nscd client backend, getxby_door, has buffer overflows


Note that the libc patches fix several more security problems.


Casper