Patch Name: PHSS_24842

Patch Description: s700_800 10.20 OV NNM6.2 NNM mishandles large objectid

Creation Date: 01/08/08

Post Date:  01/08/16

Hardware Platforms - OS Releases:
	s700: 10.20
	s800: 10.20

Products:
	OpenView Network Node Manager 6.2

Filesets:
	OVPlatform.OVMIN,B.06.20.00 OVPlatform.OVWWW-FW,B.06.20.00

Automatic Reboot?: No

Status: Special Superseded

Critical: No

Path Name: /hp-ux_patches/s700_800/10.X/PHSS_24842

Symptoms:
	PHSS_24842:
	Some NNM programs crash when large object-ids or hostnames
	are used.

Defect Description:
	PHSS_24842:
	Function _OVinetHostAddress does not handle hostnames
	larger than 256 characters properly. Function
	OVmib_read_numeric_objid does not do any boundary check
	when converting object-id strings to array of sub-ids.
	Resolution:
	_OVinetHostAddress function now returns proper error
	values when the hostname is larger than 256 characters.
	OVmib_read_numeric_objid does boundary check on the passed
	array.

SR:
	8606207927

Patch Files:
	/opt/OV/lib/libovsnmp.2
	/opt/OV/lib/libov.2
	/opt/OV/www/cgi-bin/Main/Snmp

what(1) Output:
	/opt/OV/lib/libovsnmp.2:
		libovsnmp
		rnetstat
		HP OpenView SNMP Dev Kit NNM Release B.06.20
		PATCH PHSS_24842, 08082001
		HP Precision Architecture HP-UX 10.x
		Copyright (c) 1990-2001 Hewlett-Packard Co.,  All Ri
			ghts Reserved.
	/opt/OV/lib/libov.2:
		HP OpenView ov library NNM Release B.06.20
		PATCH PHSS_24842, 08082001
		HP Precision Architecture HP-UX 10.x
		Copyright (c) 1990-2001 Hewlett-Packard Co.,  All Ri
			ghts Reserved.
	/opt/OV/www/cgi-bin/Main/Snmp:
		None

cksum(1) Output:
	3579558717 2506200 /opt/OV/lib/libovsnmp.2
	1397261178 247228 /opt/OV/lib/libov.2
	3588181611 36944 /opt/OV/www/cgi-bin/Main/Snmp

Patch Conflicts: None

Patch Dependencies:
	s700: 10.20: PHSS_24239
	s800: 10.20: PHSS_24239

Hardware Dependencies: None

Other Dependencies: None

Supersedes: None

Equivalent Patches:
	PHSS_24843:
	s700: 11.00 11.11
	s800: 11.00 11.11

	PSOV_02993:
	sparcSOL: 2.6 2.7 2.8

	NNM_00772:
	intelNT: 4.00 4.01
	intelWIN2000: 1.00

Patch Package Size: 2790 KBytes

Installation Instructions:
	Please review all instructions and the Hewlett-Packard
	SupportLine User Guide or your Hewlett-Packard support terms
	and conditions for precautions, scope of license,
	restrictions, and, limitation of liability and warranties,
	before installing this patch.
	------------------------------------------------------------
	1. Back up your system before installing a patch.

	2. Login as root.

	3. Copy the patch to the /tmp directory.

	4. Move to the /tmp directory and unshar the patch:

		cd /tmp
		sh PHSS_24842

	5a. For a standalone system, run swinstall to install the
	    patch:

		swinstall -x autoreboot=true -x match_target=true \
			-s /tmp/PHSS_24842.depot

	By default swinstall will archive the original software in
	/var/adm/sw/patch/PHSS_24842.  If you do not wish to retain a
	copy of the original software, you can create an empty file
	named /var/adm/sw/patch/PATCH_NOSAVE.

	WARNING: If this file exists when a patch is installed, the
	         patch cannot be deinstalled.  Please be careful
		 when using this feature.

	It is recommended that you move the PHSS_24842.text file to
	/var/adm/sw/patch for future reference.

	To put this patch on a magnetic tape and install from the
	tape drive, use the command:

		dd if=/tmp/PHSS_24842.depot of=/dev/rmt/0m bs=2k

Special Installation Instructions:
	WARNING: This patch should not be loaded unless the last
	         consolidated patch PHSS_24239 has been loaded.
	         To check if this patch is on your system use the
	         following command:

	         swlist -l product -l fileset PHSS_24239

	         If swlist cannot find the patch, then you will
	         need to obtain the PHSS_24239 patch and load it
	         before loading this patch.

	========================================================
	BEFORE LOADING THIS PATCH...

	If there are any ovw sessions running on either the
	Management Station or on any Management Consoles, these
	sessions need to be closed.  The "ovstop" command
	should then be executed.

	WARNING : the patch will not install if any
	          Network Node Manager processes are
	          detected.

	BACKUP ALL OpenView DIRECTORIES TO TAPE.  This
	pre-caution ensures that if you have problems after
	installing the patch, you will be able to restore your
	current state from tape.

	NOTE : ovstart is NOT executed after the patch is loaded
	       You will need to manually run ovstart.
	       Also, in order to keep a history of the patches
	       installed on your system the post-install script
	       will attempt to copy this <patch_name>.text file
	       to /usr/OV/ReleaseNotes/patches
	       (or /opt/OV/ReleaseNotes/patches).  Please make
	       sure this file is in /tmp before installation.
	========================================================