Patch-ID# 104445-01 Keywords: PC-NFS pcnfsd authentication printing panic security slip crash Synopsis: PCNFS 5.1: Pcnfsd authentication, printer and slip daemon patch Date: Jan/22/98 Solaris Release: 2.3 2.4 2.5 2.5.1 2.6 SunOS Release: 5.3 5.4 5.5 5.5.1 5.6 Unbundled Product: PC-NFS Unbundled Release: 5.1d Relevant Architectures: Sparc BugId's fixed with this patch: 1226593 1230808 1228158 1241279 1246882 4072203 Changes incorporated in this version: Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: Obsoleted by: Files included with this patch: 10444501.exe - a self extracting executable which contains: pkg.taz - Patched version of PC-NFS server package for Solaris 2.x addpkg.sh - Unix script to extract the Solaris package from pkg.taz readme.txt - A DOS formatted copy of this informational file Problem Description: 1226593 - Solaris 2.4 servers may panic when sysloging pcnfsd messages 1230808 - Security problem caused by opening permissions of the pcnfsd spool directory. 1228158 - Rpc.pcnfsd may stop running on 4.1.4 servers 1246882 - CERT Advisory CA-96.08 - Vulnerabilities in PCNFSD 1241279 - More security holes 4072203 - Dropped SLIP connections cause panic on Solaris 2.x Patch Installation Instructions: This patch will replace the Solaris 2.x server components for PC-NFS. On the system where PCNFS 5.1d is installed, exit MS-Windows. Copy the file 10444501.exe to a temporary directory and execute "10444501". This will create 3 new files in the temporary directory. Mount a writable directory on the server, preferably /var/spool/pkg, to a drive letter on the PC. Copy pkg.taz and addpkg.sh to the server from the temporary patch directory. On the Solaris 2.x server, assign addpkg.sh execute permission. Run the addpkg.sh script to extract the SUNWpcnfs package. Use pkgrm to remove the existing SUNWpcnfs package. Reboot the Solaris system if it was previously running SLIP. Use pkgadd to install the new SUNWpcnfs package. Reboot the Solaris system if SLIP is installed. Copy the 10437301.exe file to a temporary directory: Copy A:\10437301.exe C:\tmp Execute the file: C: cd \tmp 10437301 Mount directory on server net use k: servername:/var/spool/pkg Copy patch files from the PC to the Solaris system copy pkg.taz k:\ copy addpkg.sh k:\ Log in to the Solaris 2.x system where you want to install the package, become superuser, then change directory to the directory containing the files from the PC. cd /var/spool/pkg Change the addpkg.sh file permission to executable chmod +x addpkg.sh Extract the SUNWpcnfs package ./addpkg.sh Remove any previously installed SUNWpcnfs package pkgrm SUNWpcnfs Reboot if the Solaris system was running SLIP sync reboot Add the new SUNWpcnfs package pkgadd -d /var/spool/pkg Reboot Solaris system if SLIP was installed during package add. sync reboot Installation Notes: All drive letter and directory name references are PCNFS 5.1d defaults. If you have installed PCNFS 5.1d or the patch file on a different drive, or in a different directory, substitute your drive and directory names in the example commands above. Additional information about installing the UNIX server components of PC-NFS 5.1d can be found in the PC-NFS 5.1 documentation. Information about the Solaris package commands can be found in the Solaris man pages.