Patch Name: PHNE_24822

Patch Description: s700_800 10.20 ktelnetd(1M) cumulative patch

Creation Date: 01/09/15

Post Date:  01/10/12

Hardware Platforms - OS Releases:
	s700: 10.20
	s800: 10.20

Products: N/A

Filesets:
	InternetSvcSec.INETSVCS-SEC InternetSvcSec.ISEC-ENG-A-MAN

Automatic Reboot?: No

Status: General Release

Critical: No

Path Name: /hp-ux_patches/s700_800/10.X/PHNE_24822

Symptoms:
	PHNE_24822:
	SR 8606212875 / CR JAGad82062
	1. Buffer handling in telnetd needs to be enhanced.

	SR 8606212874 / CR JAGad82061
	2. Telnetd has a service issue.

Defect Description:
	PHNE_24822:
	SR 8606212875 / CR JAGad82062
	1. Buffer handling in telnetd needs to be enhanced.
	Resolution:
	 Code changes have been made to fix it.

	SR 8606212874 / CR JAGad82061
	2. Telnetd has a service issue.
	Resolution:
	 Code changes have been made to fix it.

SR:
	8606212875 8606212874

Patch Files:
	/usr/lbin/ktelnetd
	/usr/share/man/man1m.Z/ktelnetd.1m

what(1) Output:
	/usr/lbin/ktelnetd:
		Copyright (c) 1983, 1986 Regents of the University o
			f California.
		Secure Internet Svcs - $Revision: 1.27.212.15 $ $Dat
			e: 2001/08/30 07:25:33 $ PHNE_24822
		telnetd.c       5.31 (Berkeley) 2/23/89
		authenc.c       8.1 (Berkeley) 6/4/93
		auth.c  8.3 (Berkeley) 5/30/95
		misc.c  8.1 (Berkeley) 6/4/93
		encrypt.c       8.2 (Berkeley) 5/30/95
		kerberos5.c     8.1 (Berkeley) 6/4/93
		genget.c        8.2 (Berkeley) 5/30/95
		forward.c       8.2 (Berkeley) 5/30/95
	/usr/share/man/man1m.Z/ktelnetd.1m:
		None

cksum(1) Output:
	4086171833 475136 /usr/lbin/ktelnetd
	3959098747 4915 /usr/share/man/man1m.Z/ktelnetd.1m

Patch Conflicts: None

Patch Dependencies:
	s700: 10.20: PHNE_13413
	s800: 10.20: PHNE_13413

Hardware Dependencies: None

Other Dependencies: None

Supersedes: None

Equivalent Patches:
	PHNE_24762:
	s700: 11.00
	s800: 11.00

	PHNE_24829:
	s700: 11.11
	s800: 11.11

Patch Package Size: 530 KBytes

Installation Instructions:
	Please review all instructions and the Hewlett-Packard
	SupportLine User Guide or your Hewlett-Packard support terms
	and conditions for precautions, scope of license,
	restrictions, and, limitation of liability and warranties,
	before installing this patch.
	------------------------------------------------------------
	1. Back up your system before installing a patch.

	2. Login as root.

	3. Copy the patch to the /tmp directory.

	4. Move to the /tmp directory and unshar the patch:

		cd /tmp
		sh PHNE_24822

	5a. For a standalone system, run swinstall to install the
	    patch:

		swinstall -x autoreboot=true -x match_target=true \
			-s /tmp/PHNE_24822.depot

	By default swinstall will archive the original software in
	/var/adm/sw/patch/PHNE_24822.  If you do not wish to retain a
	copy of the original software, you can create an empty file
	named /var/adm/sw/patch/PATCH_NOSAVE.

	WARNING: If this file exists when a patch is installed, the
	         patch cannot be deinstalled.  Please be careful
		 when using this feature.

	It is recommended that you move the PHNE_24822.text file to
	/var/adm/sw/patch for future reference.

	To put this patch on a magnetic tape and install from the
	tape drive, use the command:

		dd if=/tmp/PHNE_24822.depot of=/dev/rmt/0m bs=2k

Special Installation Instructions:
	PHNE_24822:
	1. Ensure that all telnet sessions are closed before the
	   installation/removal of the patch.

	2. The SIS product, if enabled, has to be disabled before
	   the installation and removal of this patch.

	   If SIS is enabled during patch installation/removal, the
	   installation/removal will fail with an error.

	   To disable SIS use the following command:

	      '/usr/sbin/inetsvcs_sec disable'

	   To enable SIS after the installation/removal of this
	   patch, use the following command:

	      '/usr/sbin/inetsvcs_sec enable'

	3. To enable the -n option for telnetd after installing
	   this patch:
	   1. modify /etc/inetd.conf file by adding the option,
	      "-n<time in seconds>" to the end of the following
	      line:
	telnet   stream tcp nowait root /usr/lbin/telnetd   telnetd
	   2. # inetd -c    (to have inetd re-read the config file)

	Telnetd will timeout if it does not receive either a
	positive or negative reply to the initial option
	negotiation.
	The -n option notifies telnetd the time in seconds
	for which it should wait before timing out.

	4. Patch PHNE_13413 must first be installed before the
	   OUT_NO_DELAY option can be used.

	5. To enable the OUT_NO_DELAY option for telnetd after
	   installing this patch:
	   1. modify /etc/inetd.conf file by adding the option,
	      "-OUT_NO_DELAY" to the end of the following line:
	telnet   stream tcp nowait root /usr/lbin/telnetd   telnetd
	   2. # inetd -c    (to have inetd re-read the config file)