Patch-ID# 102278-03 Keywords: security nisplus getservent nsswitch su passwd client Synopsis: SunOS 5.4_x86: nss_nisplus.so.1 fixes Date: Jul/18/97 Solaris Release: 2.4_x86 SunOS Release: 5.4_x86 Unbundled Product: Unbundled Release: Topic: SunOS 5.4_x86: nss_nisplus.so.1 fixes BugId's fixed with this patch: 1161361 1164298 1223320 Changes incorporated in this version: 1223320 Relevant Architectures: i386 Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: Obsoleted by: Files included with this patch: usr/lib/nss_nisplus.so.1 Problem Description: 1223320 nisplus client code doesn't do proper bounds checking. (from 102278-02) 1161361 su(1M) should not require a world readable NIS+ passwd table (from 102278-01) 1164298 getservent does not follow nisplus links to higher level domains Patch Installation Instructions: -------------------------------- Refer to the Install.info file within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. Any other special or non-generic installation instructions should be described below. Special Install Instructions: ----------------------------- None.