Patch Name: PHCO_22591 Patch Description: s700_800 10.26 auto_parms/set_parms patch Creation Date: 00/10/30 Post Date: 00/11/15 Hardware Platforms - OS Releases: s700: 10.26 s800: 10.26 Products: N/A Filesets: OS-Core.UX-CORE Automatic Reboot?: No Status: General Release Critical: No Path Name: /hp-ux_patches/s700_800/10.X/PHCO_22591 Symptoms: PHCO_22591: Repackaging of PHCO_21992 (PHCO_21992:) 1. In some cases, a non-privileged local user could prevent an HP-UX machine from booting properly. 2. A user could obtain unauthorized privileges. Defect Description: PHCO_22591: Repackaging of PHCO_21992 (PHCO_21992:) Insecure operations in shell code. SR: 0000000000 Patch Files: /sbin/auto_parms /sbin/set_parms /sbin/set_parms.util /sbin/set_parms.d/05_hostname /sbin/set_parms.d/20_ip_address /sbin/set_parms.d/25_addl_netwrk what(1) Output: /sbin/auto_parms: $Revision: 1.1 cmd/auto_parms, hpux, hpux_10.26, ic5 fi $ $Date: 00/10/26 15:36:42 $ Hewlett-Pack ard Co. RCS: $Header: auto_parms,v 10.28.1 2000/08/06 00:00: 00 hmgr Exp $ 00/10/26 cmd/auto_parms, hpux, hpux_10.26, ic5fi Rev ision 1.1 PATCH_10.26 (PHCO_22591) /sbin/set_parms: $Revision: 1.12 cmd/set_parms.d/set_parms, hpux, hpu x_10.26, ic5fi $ $Date: 00/11/09 10:17:14 $ Hewlett-Packard Co. $Revision: 10.8.1 $ 00/11/09 cmd/set_parms.d/set_parms, hpux, hpux_10.26 , ic5fi Revision 1.12 PATCH_10.26 (PHCO_2259 1) /sbin/set_parms.util: $Revision: 1.8 cmd/set_parms.d/set_parms.util, hpux, hpux_10.26, ic5fi $ $Date: 00/10/26 15:27:4 4 $ Hewlett-Packard Co. $Revision: 10.9.1 $ 00/10/26 cmd/set_parms.d/set_parms.util, hpux, hpux_ 10.26, ic5fi Revision 1.8 PATCH_10.26 (PHCO_ 22591) /sbin/set_parms.d/05_hostname: $Revision: 1.6 cmd/set_parms.d/05_hostname, hpux, hp ux_10.26, ic5fi $ $Date: 00/10/26 15:29:15 $ Hewlett-Packard Co. $Revision: 10.6.1 $ 00/10/26 cmd/set_parms.d/05_hostname, hpux, hpux_10. 26, ic5fi Revision 1.6 PATCH_10.26 (PHCO_225 91) /sbin/set_parms.d/20_ip_address: $Revision: 1.5 cmd/set_parms.d/20_ip_address, hpux, hpux_10.26, ic5fi $ $Date: 00/10/26 15:29:56 $ Hewlett-Packard Co. $Revision: 10.13.1 $ 00/10/26 cmd/set_parms.d/20_ip_address, hpux, hpux_1 0.26, ic5fi Revision 1.5 PATCH_10.26 (PHCO_2 2591) /sbin/set_parms.d/25_addl_netwrk: $Revision: 1.7 cmd/set_parms.d/25_addl_netwrk, hpux, hpux_10.26, ic5fi $ $Date: 00/10/26 15:35:2 2 $ Hewlett-Packard Co. $Revision: 10.7.1 $ 00/10/26 cmd/set_parms.d/25_addl_netwrk, hpux, hpux_ 10.26, ic5fi Revision 1.7 PATCH_10.26 (PHCO_ 22591) cksum(1) Output: 2796360513 39360 /sbin/auto_parms 3152257100 29743 /sbin/set_parms 4075988394 58123 /sbin/set_parms.util 2899734902 15271 /sbin/set_parms.d/05_hostname 3678003332 11336 /sbin/set_parms.d/20_ip_address 659309794 40331 /sbin/set_parms.d/25_addl_netwrk Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: None Supersedes: None Equivalent Patches: PHCO_21992: s700: 10.20 s800: 10.20 Patch Package Size: 250 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHCO_22591 5a. For a standalone system, run swinstall to install the patch: swinstall -x autoreboot=true -x match_target=true \ -s /tmp/PHCO_22591.depot By default swinstall will archive the original software in /var/adm/sw/patch/PHCO_22591. If you do not wish to retain a copy of the original software, you can create an empty file named /var/adm/sw/patch/PATCH_NOSAVE. WARNING: If this file exists when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. It is recommended that you move the PHCO_22591.text file to /var/adm/sw/patch for future reference. To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHCO_22591.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: None