Patch-ID# 107478-05
Keywords: security 4.1.4 -hosts automount mountd netgroup
Synopsis: SunOS 5.7_x86: /usr/lib/nfs/mountd Patch
Date: Mar/07/2005


Install Requirements: See Special Install Instructions                      
                      Reboot after installation                      
                      
Solaris Release: 7_x86

SunOS Release: 5.7_x86

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for SPARC as patch 107477

Topic: SunOS 5.7_x86: /usr/lib/nfs/mountd Patch
       NOTE:  Refer to Special Install Instructions section for
              IMPORTANT specific information on this patch.

Relevant Architectures: i386

BugId's fixed with this patch: 4092505 4124715 4196956 4215075 4954310

Changes incorporated in this version: 4954310

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/lib/nfs/mountd

Problem Description:

4954310 automountd runs continuously
 
(from 107478-04)
 
4215075 Cannot mount an NFS filesystem shared to network from x86 server
 
(from 107478-03)
 
4124715 Denial of Service in connection oriented transports.
 
(from 107478-02)
 
4196956 NFS - denial of netgroup access doesn't work properly.
 
(from 107478-01)
 
4092505 4.1.4 system can't mount Solaris 2.6 with /net -hosts automount

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
 
Reboot the system after patch installation.
 
NOTE 1:   To get the complete fix for bug 4124715 (DENIAL OF
          SERVICE IN CONNECTION ORIENTED TRANSPORTS), one also
	  needs to install the following patches:
 
	    106943-09  (or greater)  libnsl & rpc.nisd patch
	    108749-01  (or greater)  /usr/lib/nfs/statd patch
	    108751-01  (or greater)  /usr/lib/netsvc/yp/ypbind patch
	    108753-01  (or greater)  /usr/lib/netsvc/yp/ypserv patch
	    108755-01  (or greater)  /usr/lib/netsvc/yp/ypxfrd patch
	    108757-01  (or greater)  /usr/lib/netsvc/yp/rpc.ypupdated patch
	    108759-01  (or greater)  /usr/sbin/keyserv patch
	    108761-01  (or greater)  /usr/sbin/rpcbind patch
	    108763-01  (or greater)  /usr/sbin/rpc.nisd_resolv patch
	    108765-01  (or greater)  /usr/sbin/rpc.bootparamd patcj
	    108552-03  (or greater)  /usr/sbin/rpc.nispasswdd patch
 
NOTE 2:    To get the complete fix for bugid 4954310, please also install
           this patch on the target system:
 
           106981-25  (or greater)  libthread patch
 
           The soft dependency on patch 106981-25 for this complete bugfix
           is, however, one-way;  hence this bugid (4954310) does not need
           to be delivered in nor is it documented in the README of 
           106981-25.

README -- Last modified date:  Monday, March 7, 2005