9. SECURITY: Closing file descriptors 0, 1 and/or 2 before executing a setuid program can make this program
open files under these file descriptors, which have special meanings for libc (stdin/out/err). Reading or writing
to root-owned files can be made possible, since stdXX==opened_file.
erg712059 fz526562
10. SECURITY: A rogue talk client is able to cause talk demon to overrun a buffer, and could be able to
compromise privilege of the machine running talkd.
erg712055 fz521053
11. SECURITY: Buffer overflow in XPR portion of libnsl library.
erg712182 fz526861
12. SECURITY: A command line buffer overflow in ps command can be exploited.
erg712109 fz525923
13. SECURITY - The implementation of xdr_array can be tricked into writing beyond the buffers it allocated when
deserializing the XDR stream.
erg501642 fz525725
14. SECURITY: Fixed a security vulnerability in sendmail binary that can be exploited by remote users to gain
root access.
fz527484 erg712247
15. SECURITY: Ftp'ing a file with a pipe as the first character in its name (for example, |xyz) executes the file on
client machine.
erg712227 fz527425 CSSA-2003-SCO.3
Networking fixes:
16. When receiving data from a TCP socket it may lock up indefinitely with data buffered up in the kernel but
never returned to the process.
fz520887
17. Panic in PPP driver - pppwsrv() - due to a race condition.
erg501673 fz526330
18. Panic in PPP's pcid driver.
erg501650 fz525867
19. Communication problem between pcid and ppp driver.
erg501678 fz526352
20. The function write(2) erroneously returns EISCONN on a raw socket.
erg501681 fz526404
21. Connection server fails with the following error: "10/24/02 17:14:51; 27209; cs: ioctl() set signal error;
errno=22"
erg712153 fz526540
22. The utility ttymon sometimes stops listening to a port after PPP disconnect.
erg501634 fz525626
23. Improved network printing performance.
erg712041 fz520932
24. If an ftp client host was reset (as in cycling the power) during the data transmission to the server, the ftp-data
connection never times out on the server. If the client tries to use again the same port after reboot for an ftp
transmission, the server responds with EADDRINUSE.
erg501703 fz526973
25. After removing a network interface, "pkgchk nics" complains about missing files.
erg712152 fz526505
26. When excessive short-lived rlogin sessions are being created, /var/adm/wtmp and /var/adm/wtmpx get out of
sync and must be rewritten. While these files are being rewritten, no one can rlogin to the system. If these
12 of 15
UnixWare 7.1.3 Update Pack 1 New Features and Notes
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals