Patch-ID# 104938-04 Keywords: security in.ftpd ftp port Synopsis: SunOS 5.3: usr/sbin/in.ftpd patch Date: Jun/25/2001 Solaris Release: 2.3 SunOS Release: 5.3 Unbundled Product: Unbundled Release: Xref: Topic: SunOS 5.3: usr/sbin/in.ftpd patch Relevant Architectures: sparc BugId's fixed with this patch: 1246408 4009680 4104868 4139895 Changes incorporated in this version: 4139895 Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: Obsoleted by: Files included with this patch: /usr/sbin/in.ftpd Problem Description: 4139895 in.ftpd can be fooled to connect to a reserved port (from 104938-03) 4009680 ftpd security problem (from 104938-02) 4104868 in.ftpd consumes CPU if client end shutdown uncleanly (from 104938-01) 1246408 ftp may be used to get root access from port 20 to other machines Patch Installation Instructions: -------------------------------- Refer to the Install.info file within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. Any other special or non-generic installation instructions should be described below. Special Install Instructions: ----------------------------- None. README -- Last modified date: Monday, June 25, 2001