Patch-ID# 106793-03
Keywords: security buffer oveflow ufsdump ufsrestore multivolume
Synopsis: SunOS 5.7: ufsdump and ufsrestore patch
Date: 07/Jun/99

Solaris Release: 7

SunOS release: 5.7

Unbundled Product: 

Unbundled Release: 

Topic: SunOS 5.7: ufsdump and ufsrestore patch

	NOTE:  Refer to Special Install Instructions section for 
               IMPORTANT specific information on this patch.

BugId's fixed with this patch: 4077276 4132365 4145883 4169853 4184189 4240566 

Changes incorporated in this version: 4240566

Relevant Architectures: sparc

Patches accumulated and obsoleted by this patch:  

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch:

/usr/include/protocols/dumprestore.h
/usr/lib/fs/ufs/ufsrestore
/usr/lib/fs/ufs/ufsdump

Problem Description:

4240566 security: LC_MESSAGES buffer overflow

(from 106793-02)

4132365 security vulnerability on ufsdump and restore

(from 106793-01)

4145883 ufsdump does not stop given no input for questions
4132365 Security vulnerability on ufsdump and restore in Solaris 2.6 & 7
4077276 multivolume ufsdump fails dumping to remote system via non-root login ID
4169853 Change in flags in an open system call causes 'ufsrestore rvf dumpfile' to fail
4184189 request CodeManager file generators for usr/src/cmd/backup

Patch Installation Instructions:
--------------------------------

For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.

For Solaris 7 release, refer to the man pages for instructions on
using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:

       example# patchadd /var/spool/patch/104945-02

The following example removes a patch from a standalone system:

       example# patchrm 104945-02

For additional examples please see the appropriate man pages.

Special Install Instructions: 
----------------------------- 

	NOTE 1:  This patch disables the obsolete hmsdump and hmsrestore mode 
	       	 of operation.

	NOTE 2:	 To get the complete fix for 4240566 (security: LC_MESSAGES 
		 buffer overflow), we recommend installing the following
		 patches:

		 106541-06 (or newer)	kernel update
		 107972-01 (or newer)	/usr/sbin/static/rcp patch

