Patch-ID# 104960-02 Keywords: security snoop 8192 IP SIOCGIFNUM snoop_capture Synopsis: SunOS 5.5.1: usr/sbin/snoop patch Date: Dec/07/99 Solaris Release: 2.5.1 SunOS Release: 5.5.1 Unbundled Product: Unbundled Release: Xref: This patch available for x86 as patch 104961 Topic: SunOS 5.5.1: usr/sbin/snoop patch NOTE: Refer to Special Install Instructions section for IMPORTANT specific information on this patch. BugId's fixed with this patch: 4032089 4042550 4282985 Changes incorporated in this version: 4282985 Relevant Architectures: sparc Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: iss_sparc-01 (or newer) Patches required with this patch: Obsoleted by: Files included with this patch: /usr/sbin/snoop Problem Description: 4282985 Snoop may be exploited to gain root access (from 104960-01) 4032089 snoop can not handle 8192 IP address - needs SIOCGIFNUM 4042550 Fix for BugId 4032089 which introduced a new bug - snoop_capture.c Patch Installation Instructions: -------------------------------- Refer to the Install.info file within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. Any other special or non-generic installation instructions should be described below. Special Install Instructions: ----------------------------- NOTE: We recommend installing the following patches to get the complete support for large IP addresses: 103582-13 (or newer) kernel/drv/tcp patch 103594-10 (or newer) usr/lib/sendmail fixes 103630-08 (or newer) kernel/drv/ip patch 104331-03 (or newer) usr/sbin/rpcbind patch 104956-01 (or newer) usr/sbin/in.rarpd patch 104958-01 (or newer) usr/sbin/in.rdisc patch