Patch-ID# 103577-13 Keywords: security ftp nfs leak core getreply domap rsh rexec in.ftpd PASV Synopsis: SunOS 5.5: ftp, in.ftpd, in.rexecd and in.rshd patch Date: Jul/17/2001 Solaris Release: 2.5 SunOS Release: 5.5 Unbundled Product: Unbundled Release: Xref: This patch available for x86 as patch 103578 Topic: SunOS 5.5: ftp, in.ftpd, in.rexecd and in.rshd patch Relevant Architectures: sparc BugId's fixed with this patch: 1198215 1241282 1246408 1249667 1251275 1255435 4009680 4066864 4080226 4104868 4139895 4197316 4436988 4445755 4446600 4451524 4452705 Changes incorporated in this version: 4436988 4445755 4446600 4451524 4452705 Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: Obsoleted by: Files included with this patch: /usr/bin/ftp /usr/sbin/in.ftpd /usr/sbin/in.rexecd /usr/sbin/in.rshd Problem Description: 4436988 security: Globbing problem in in.ftpd 4446600 ftpd memory leaks 4445755 ftpd glob can still use a lot of memory and CPU 4451524 in.ftpd cores 4452705 GAVSIZ definition needs to stay in glob.c (from 103577-12) 4139895 in.ftpd can be fooled to connect to a reserved port (from 103577-11) 4009680 ftpd security problem (from 103577-10) 4197316 buffer overflow in ftp (from 103577-09) 4080226 Security issue: security hole in mget (in ftp client) (from 103577-08) 4104868 in.ftpd consumes CPU if client end shutdown uncleanly (from 103577-07) 4066864 in.rexecd does not prevent access to expired accounts (from 103577-06) 1246408 ftp may be used to get root access from port 20 to other machines (from 103577-05) 1251275 ftpd,rshd,rexecd,in.uucpd on NFS client puts user in / instead of ~ (from 103577-04) 1241282 ftp session dies on cd or dir (from 103577-03) 1255435 ftp dumps core if lostpeer signal handler is called right before getreply() (from 103577-02) 1198215 ftp can silently lose data when writing to nfs (from 103577-01) 1249667 ftp size increases by 8k/2 page size with every open/close session memory leak Patch Installation Instructions: -------------------------------- Refer to the Install.info file within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. Any other special or non-generic installation instructions should be described below. Special Install Instructions: ----------------------------- None. README -- Last modified date: Tuesday, July 17, 2001