Date: Tue, 12 Feb 2002 14:50:26 -0800
From: security@caldera.com
To: bugtraq@securityfocus.com, announce@lists.caldera.com,
Subject: Security Update: [CSSA-2002-SCO.4] Open UNIX, UnixWare 7: snmpd memory fault vulnerabilities
--ZPt4rx8FFjLCG7dd
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
To: bugtraq@securityfocus.com announce@lists.caldera.com scoannmod@xenitec.=
on.ca
___________________________________________________________________________
Caldera International, Inc. Security Advisory
Subject: Open UNIX, UnixWare 7: snmpd memory fault vulnerabilities
Advisory number: CSSA-2002-SCO.4
Issue date: 2002 February 12
Cross reference:
___________________________________________________________________________
1. Problem Description
=09
The University of Oulu (Finland) wrote approximately 53000
tests for snmpd error conditions. For Open UNIX and UnixWare,
94 of the tests caused snmpd to memory fault. This could lead
to denial-of-service attacks, or possible local and remote
root acquisition.
2. Vulnerable Supported Versions
Operating System Version Affected Files
------------------------------------------------------------------
Open UNIX 8.0.0 /usr/lib/libsnmp.so
UnixWare 7 7.1.1 /usr/lib/libsnmp.so
UnixWare 7 7.1.0 /usr/lib/libsnmp.so
3. Workaround
If snmp is not a needed service:
add an 'exit 0' statement (without the single quotes) as the
first executable line of /etc/rc2.d/S73snmp,
-or-
remove the execute bits from the in.snmpd binary,
# chmod 0 /usr/sbin/in.snmpd
4. Open UNIX 8.0.0
4.1 Location of Fixed Binaries
ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.4/
4.2 Verification
MD5 (erg711937.Z) =3D 62f81d5f7e0c5e0f4a2704e015d37fc4
md5 is available for download from
ftp://stage.caldera.com/pub/security/tools/
4.3 Installing Fixed Binaries
Upgrade the affected binaries with the following commands:
Download erg711937.Z to the /tmp directory
# uncompress /tmp/erg711937.Z
# pkgadd -d /tmp/erg711937
5. UnixWare 7.1.1
5.1 Location of Fixed Binaries
ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.4/
5.2 Verification
MD5 (erg711937b.Z) =3D 09b8dbdb080e5588c6f61669ea914af7
md5 is available for download from
ftp://stage.caldera.com/pub/security/tools/
5.3 Installing Fixed Binaries
Upgrade the affected binaries with the following commands:
Download erg711937b.Z to the /tmp directory
# uncompress /tmp/erg711937b.Z
# pkgadd -d /tmp/erg711937b
6. UnixWare 7.1.0
6.1 Location of Fixed Binaries
ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.4/
6.2 Verification
MD5 (erg711937c.Z) =3D f15696cfc2b9f0afc1b0432bb311151a
md5 is available for download from
ftp://stage.caldera.com/pub/security/tools/
6.3 Installing Fixed Binaries
Upgrade the affected binaries with the following commands:
Download erg711937c.Z to the /tmp directory
# uncompress /tmp/erg711937c.Z
# pkgadd -d /tmp/erg711937c
7. References
http://www.cert.org/advisories/CA-2002-03.html
This and other advisories are located at
http://stage.caldera.com/support/security
This advisory addresses Caldera Security internal incidents
sr858479, fz519781, erg711937.
8. Disclaimer
Caldera International, Inc. is not responsible for the misuse
of any of the information we provide on our website and/or
through our security advisories. Our advisories are a service
to our customers intended to promote secure installation and
use of Caldera International products.
9. Acknowledgements
This vulnerability was discovered and researched by the
University of Oulu (oulu.fi).
=20
___________________________________________________________________________
--ZPt4rx8FFjLCG7dd
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (SCO_SV)
Comment: For info see http://www.gnupg.org
iEYEARECAAYFAjxpnC0ACgkQaqoBO7ipriEzvACgirarz7ZVc+ySRhxJDDQTHDt7
rmYAnjs7Xu0gktZHMQFNDvyUos+Wk1N3
=w+Ov
-----END PGP SIGNATURE-----
--ZPt4rx8FFjLCG7dd--
