Patch Name: PHNE_22058 Patch Description: s700_800 10.01-10.10 cumulative ftp(1) and ftpd(1M) patch Creation Date: 00/09/25 Post Date: 00/10/09 Hardware Platforms - OS Releases: s700: 10.01 10.10 s800: 10.01 10.10 Products: N/A Filesets: InternetSrvcs.INETSVCS-RUN InternetSrvcs.INET-ENG-A-MAN Automatic Reboot?: No Status: General Release Critical: No (superseded patches were critical) PHNE_10009: OTHER A timing problem could occur on receipt of a simultaneous data close and ABORT PHNE_6014: OTHER Prevents the ability to do ftp server bounce. Path Name: /hp-ux_patches/s700_800/10.X/PHNE_22058 Symptoms: PHNE_22058: 1. CR JAGad12040/SR 8606142685 ftpd does not function properly. 2. CR JAGaa27007/SR 8606160774 ls command fails in an anonymous ftp session. PHNE_17964: * 'ftp' client does not work properly. PHNE_13596: * ftp: problem with passing files. * FTP Newer command does not work as documented if file does not exist. * FTP:don't get error message if filesystem gets full. * Proxy Get command not working. * ftpd does not allow ports under 1024 even with -p option. * FTP giving error 425:Can't create data socket. * have inbound/outbound transfer logging in ftpd. * FTP Newer command has problem handling dates. PHNE_10009: (ftpd) * Privileged ports cannot be specified as a part of the PORT command. * An error message "You've GOT to be joking" is displayed when a client specifies a privileged port as a data-port. * A ftp client could interrupt a data transfer by sending a data close and an ABORT. A timing problem has been observed on the ftpd side. PHNE_9181: (ftpd) * ftpd returns a 550 after an NLST when the file is not found. PHNE_6919: (ftpd) * On trusted systems ftpd ignores /etc/ftpusers. PHNE_6014: (ftpd) * The PORT command would allow connections to 3rd party servers at random ports, and combined with quoted commands, could be used to mask the source IP address of that connection. Defect Description: PHNE_22058: 1. CR JAGad12040/SR 8606142685 ftpd does not function properly. Resolution: * Code changes are made to fix the problem. 2. CR JAGaa27007/SR 8606160774 Description in ftpd man page to create an anonymous ftp account wrongly states that ~ftp/usr/bin should contain a copy of /usr/bin/ls. But ~ftp/usr/bin should actually contain a copy of /sbin/ls. Resolution: * ftpd man page has been modified to replace /usr/bin/ls with /sbin/ls. PHNE_17964: * 'ftp' client does not work properly. Resolution: * Made code changes to fix the problem. PHNE_13596: * ftp: problem with passing files. * FTP Newer command does not work as documented if file does not exist. * FTP:don't get error message if filesystem gets full. * Proxy Get command not working. * ftpd does not allow ports under 1024 even with -p option. * FTP giving error 425:Can't create data socket. * have inbound/outbound transfer logging in ftpd. * FTP Newer command has problem handling dates. PHNE_10009: (ftpd) * An option "-p" has been added. The PORT command can now specify a privileged port as a data-port if this option is set. * The error message "You've GOT to be joking" has been replaced by "Port command failure". * ftpd has been fixed to handle a simultaneous data close and ABORT appropriately. PHNE_9181: (ftpd) * ftpd returns a 550 after a NLST when a file is not found. The return code was changed to 450 per RFC 959. PHNE_6919: (ftpd) * The code for trusted systems was not calling the routine to check for entries in /etc/ftpusers. PHNE_6014: (ftpd) * There were no limits on the range of allowable PORTs. Now only ftp-data ports on the system originating the ftp-ctrl connection are accepted, and only non-privileged ports on that system are permitted. SR: 8606142685 8606160774 4701409938 4701373696 5003369611 1653245845 5003386581 1653245852 1653254193 1653232942 4701346098 5003343970 5003344846 5003322867 4701334763 Patch Files: /usr/lbin/ftpd /usr/share/man/man1m.Z/ftpd.1m /usr/bin/ftp what(1) Output: /usr/lbin/ftpd: Copyright (c) 1985, 1988 Regents of the University o f California. ftpd.c based on 5.28 (Berkeley) 4/20/89 Revision 1.7.112.5 Fri Sep 15 05:55:08 GMT 2000 ftpcmd.y 5.20 (Berkeley) 2/28/89 glob.c 5.7 (Berkeley) 12/14/88 popen.c 5.7 (Berkeley) 2/14/89 logwtmp.c 5.2 (Berkeley) 9/22/88 /usr/share/man/man1m.Z/ftpd.1m: None /usr/bin/ftp: Copyright (c) 1985, 1989 Regents of the University o f California. main.c based on 5.13 (Berkeley) 3/14/89 Revision 1.1.112.3 Wed Aug 11 06:26:40 GMT 1999 cmds.c 5.18 (Berkeley) 4/20/89 cmdtab.c 5.9 (Berkeley) 3/21/89 ftp.c 5.28 (Berkeley) 4/20/89 glob.c 5.7 (Berkeley) 12/14/88 ruserpass.c 5.1 (Berkeley) 3/1/89 domacro.c 1.6 (Berkeley) 2/28/89 cksum(1) Output: 757422459 86016 /usr/lbin/ftpd 3259741217 94208 /usr/bin/ftp 2477853749 7344 /usr/share/man/man1m.Z/ftpd.1m Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: None Supersedes: PHNE_6014 PHNE_6919 PHNE_9181 PHNE_10009 PHNE_13596 PHNE_17964 Equivalent Patches: PHNE_22057: s700: 10.20 s800: 10.20 PHNE_21936: s700: 11.00 s800: 11.00 Patch Package Size: 240 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHNE_22058 5a. For a standalone system, run swinstall to install the patch: swinstall -x autoreboot=true -x match_target=true \ -s /tmp/PHNE_22058.depot By default swinstall will archive the original software in /var/adm/sw/patch/PHNE_22058. If you do not wish to retain a copy of the original software, you can create an empty file named /var/adm/sw/patch/PATCH_NOSAVE. WARNING: If this file exists when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. It is recommended that you move the PHNE_22058.text file to /var/adm/sw/patch for future reference. To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHNE_22058.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: None