-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


______________________________________________________________________________

			SCO Security Advisory

Subject:		OpenServer 5.0.5 OpenServer 5.0.6 : scoadmin command creates temporary files insecurely
Advisory number: 	CSSA-2002-SCO.22.1
Issue date: 		2002 October 23
Cross reference:
______________________________________________________________________________


1. Problem Description

	The scoadmin command creates and uses temporary files
	insecurely. Names can be predicted, and spoofed with symbolic
	links.

	The previous release of this fix did not fully fix the
	problem. Caldera strongly recommends that you install this fix
	whether or not the previous release was installed.  NB: Before
	installing CSSA-2002-SCO.22.1, any previously installed
	version of CSSA-2002-SCO.22 must be removed.


2. Vulnerable Supported Versions

	System				Binaries
	----------------------------------------------------------------------
	OpenServer 5.0.5		/etc/sysadm.d/lib/sysadm.tlib.Z
					/etc/sysadm.d/lib/sysadm.tndx.Z
	OpenServer 5.0.6		/etc/sysadm.d/lib/sysadm.tlib.Z
					/etc/sysadm.d/lib/sysadm.tndx.Z


3. Solution

	The proper solution is to install the latest packages.


4. OpenServer 5.0.5

	4.1 Location of Fixed Binaries

	ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.22.1


	4.2 Verification

	MD5 (VOL.000.000) = 16a568d06a5d57369b1a2566418b7021

	md5 is available for download from
		ftp://ftp.sco.com/pub/security/tools


	4.3 Installing Fixed Binaries

	Upgrade the affected binaries with the following sequence:

	1) Download the VOL* files to the /tmp directory

	2) Run the custom command, specify an install from media
	images, and specify the /tmp directory as the location of
	the images.


5. OpenServer 5.0.6

	5.1 Location of Fixed Binaries

	ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.22.1


	5.2 Verification

	MD5 (VOL.000.000) = 16a568d06a5d57369b1a2566418b7021

	md5 is available for download from
		ftp://ftp.sco.com/pub/security/tools


	5.3 Installing Fixed Binaries

	Upgrade the affected binaries with the following sequence:

	1) Download the VOL* files to the /tmp directory

	2) Run the custom command, specify an install from media
	images, and specify the /tmp directory as the location of
	the images.


6. References

	Specific references for this advisory:
		none

	SCO security resources:
		http://www.sco.com/support/security/index.html

	This security fix closes SCO incidents sr847944, SCO-1-233,
	erg711739.


7. Disclaimer

	SCO is not responsible for the misuse of any of the information
	we provide on this website and/or through our security
	advisories. Our advisories are a service to our customers
	intended to promote secure installation and use of SCO
	products.


8. Acknowledgements

	Kevin Finisterre (dotslash@snosoft.com) discovered and
	researched this vulnerability

______________________________________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (SCO_SV)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAj23I+0ACgkQaqoBO7ipriFSdgCgqR4vo76ND4guKOl6+UqfZk7a
EMAAoKdXSh36bNDaHb9s05qYeI4uGfq/
=5IRA
-----END PGP SIGNATURE-----