Patch-ID# 113319-04
Keywords: security xdr_array overflow core dump nisplus UDP rpc
Synopsis: SunOS 5.9: patch /usr/lib/libnsl.so.1
Date: 30/Oct/02

Solaris Release: 9

SunOS release: 5.9

Unbundled Product: 

Unbundled Release: 

Topic: SunOS 5.9: patch /usr/lib/libnsl.so.1

BugId's fixed with this patch: 1226166 4517003 4648085 4680691 4690775 4691127 

Changes incorporated in this version: 4680691

Relevant Architectures: sparc

Patches accumulated and obsoleted by this patch:  

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch:

/usr/lib/libnsl.a
/usr/lib/libnsl.so.1
/usr/lib/sparcv9/libnsl.so.1

Problem Description:

4680691 doctored rpc calls over UDP can bring down machines through rpcbind

(from 113319-03)

1226166 rpcbind does not bind with the correct network interface
4690775 nisplus_ldap_udt: rpcbind got killed and core dump during nisplus server setup

(from 113319-02)

4517003 ypserv spinning after client disconnects
4648085 automountd dumps core freeing an illegal address in __svc_dupcache_victim()

(from 113319-01)

4691127 Possible type overflow in xdr_array

Patch Installation Instructions:
--------------------------------

For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.

For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:

       example# patchadd /var/spool/patch/104945-02

The following example removes a patch from a standalone system:

       example# patchrm 104945-02

For additional examples please see the appropriate man pages.

Special Install Instructions: 
----------------------------- 

Note:  To get the complete fix for bugids 1226166 and 4690775, patch 
       113330-01 must also be installed on your system.

