Patch Name: PHCO_21990 Patch Description: s700_800 10.01 auto_parms/set_parms Creation Date: 00/08/07 Post Date: 00/08/21 Hardware Platforms - OS Releases: s700: 10.01 s800: 10.01 Products: N/A Filesets: OS-Core.UX-CORE Automatic Reboot?: No Status: General Release Critical: No Path Name: /hp-ux_patches/s700_800/10.X/PHCO_21990 Symptoms: PHCO_21990: 1. In some cases, a non-privileged local user could prevent an HP-UX machine from booting properly. 2. A user could obtain unauthorized privileges. Defect Description: PHCO_21990: Insecure operations in shell code. SR: 0000000000 Patch Files: /sbin/set_parms /sbin/set_parms.util /sbin/set_parms.d/05_hostname /sbin/set_parms.d/20_ip_address /sbin/set_parms.d/25_addl_netwrk what(1) Output: /sbin/set_parms: $Revision: 1.24.1 $ /sbin/set_parms.util: $Revision: 1.17.1 $ /sbin/set_parms.d/05_hostname: $Revision: 1.10.1 $ /sbin/set_parms.d/20_ip_address: $Revision: 1.8.1 $ /sbin/set_parms.d/25_addl_netwrk: $Revision: 1.16.1 $ cksum(1) Output: 41697557 24362 /sbin/set_parms 669907908 42890 /sbin/set_parms.util 3877839940 13305 /sbin/set_parms.d/05_hostname 3045412295 8115 /sbin/set_parms.d/20_ip_address 398178228 38143 /sbin/set_parms.d/25_addl_netwrk Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: None Supersedes: None Equivalent Patches: PHCO_21991: s700: 10.10 s800: 10.10 PHCO_21992: s700: 10.20 s800: 10.20 PHCO_21993: s700: 11.00 s800: 11.00 Patch Package Size: 180 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHCO_21990 5a. For a standalone system, run swinstall to install the patch: swinstall -x autoreboot=true -x match_target=true \ -s /tmp/PHCO_21990.depot By default swinstall will archive the original software in /var/adm/sw/patch/PHCO_21990. If you do not wish to retain a copy of the original software, you can create an empty file named /var/adm/sw/patch/PATCH_NOSAVE. WARNING: If this file exists when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. It is recommended that you move the PHCO_21990.text file to /var/adm/sw/patch for future reference. To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHCO_21990.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: None