Subject: UnixWare 7.1.0: ppptalk supplement, Advisory number: n/a Issue date: n/a ftp://ftp.sco.com/pub/security/sse/ptf7444a Dear SCO Customer, Support Level Supplement (SLS) ptf7444, the UnixWare 7.1.0 ppptalk supplement, addresses the following problem: Buffer overflows have been found in several ppp options. As ppp is a suid binary, it is possible to use these buffer oveflows to obtain increased privilege. Contents -------- /usr/bin/ppptalk Software Notes and Recommendations ---------------------------------- ptf7444 should only be installed on: UnixWare 7.1.0 Note: SLS ptf7401 must be installed and the system rebooted before installing SLS ptf7444a. Installation Instructions ------------------------- 1. Download the ptf7444a.Z file to the /tmp directory on your machine. 2. As root, uncompress the file and add the package to your system using these commands: $ su Password: # uncompress /tmp/ptf7444a.Z # pkgadd -d /tmp/ptf7444a # rm /tmp/ptf7444a 3. There is no need to reboot the system after installing this package. The release notes displayed prior to installation can be found in: /var/sadm/pkg/ptf7444/install/ptf7444.txt Removal Instructions -------------------- 1. As root, remove the package using these commands: $ su Password: # pkgrm ptf7444 2. There is no need to reboot the system after removing this package. If you have questions regarding this supplement, or the product on which it is installed, please contact your software supplier.