SOFTPAQ NUMBER: SP19713 PART NUMBER: N/A FILE NAME: sp19713.tgz TITLE: SNMP Security Vulnerability Update for SuSE Linux Enterprise Server 7 (IA-32) VERSION: 1.0.0 LANGUAGE: English CATEGORY: Software Solutions DIVISIONS: Systems PRODUCTS AFFECTED: Compaq Proliant Servers running SuSE Linux Enterprise Server 7 (IA-32) and Compaq Foundation Agents for Linux (cmafdtn) version 5.30.0. OPERATING SYSTEM: SuSE Linux Enterprise Server 7 (IA-32) SYSTEM CONFIGURATION: N/A PREREQUISITES: This software update requires the Compaq Foundation Agents for Linux (cmafdtn) version 5.30.0 to be installed. EFFECTIVE DATE: April 25, 2002 ELECTRONIC DISTRIBUTION ALLOWED: Yes SUPERSEDES: N/A DESCRIPTION: This SoftPaq contains the SNMP security vulnerability update for SuSE Linux Enterprise Server 7 (IA-32). ENHANCEMENTS/FIXES: Fixed a potential security vulnerability in ucdsnmp RPM. (See CERT Advisory @ http://www.cert.org/advisories/CA-2002-03.html). HOW TO USE: 1. Before applying this update, install your system with version 5.30.0 of Compaq Management Agents (cmafdtn, cmasvr, cmastor and cmanic RPMs). Compaq Management Agents can be downloaded at "http://www.compaq.com/support/files/server/us/index.html". 2. Download this SoftPaq to a directory on your hard drive. The file that is downloaded is a compressed tar file (*.tgz) with a filename based on the SOFTPAQ NUMBER above. 3. Log in as "root" and change to the directory containing the Softpaq. 4. From that directory, type following command: # tar xvzf sp19713.tgz Following files will be created in the current directory: sp19713.txt sp19713.sh cmaX.c cmaX.h read_config.c ucdsnmp.src.rpm ucdsnmp.rpm "ucdsnmp" RPMs are downloaded from SuSE Linux Maintenance Web: http://support.suse.de/psdb 5. Run "sh ./sp19713.sh" command and follow the instructions to apply the update. Note: If other installed RPMs are not compatible with new ucdsnmp RPM, the command will fail. In this situation, the incompatibility must be resolved before applying the update again. 6. Message "./sp19713.sh completed successfully!" will be displayed when the command completed successfully. 7. For more information and messages from "./sp19713" script, see "/var/spool/compaq/foundation/tmp/sp19713/sp19713.info". 8. After the update is applied, you may delete the SoftPaq file downloaded in step 2 and all files extracted in step 4. Copyright 2002, Compaq Computer Corporation. All rights reserved. Product names mentioned herein may be trademarks and/or registered trademarks of their respective companies