Patch-ID# 108964-11


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: security mobile ip services ilp tftp decode ldap edhcp snoop
Synopsis: SunOS 5.8: in.tftpd and snoop patch
Date: Aug/04/2008


Install Requirements: NA

Solaris Release: 8

SunOS Release: 5.8

Unbundled Product:

Unbundled Release:

Xref: This patch available for x86 as patch 108965

Topic: SunOS 5.8: in.tftpd and snoop patch
	NOTE:   Refer to Special Install Instructions section for
                IMPORTANT specific information on this patch.


Relevant Architectures: sparc

Bugs fixed with this patch:

Sun CR # Bug #
111088114863704
401182214926062
421886914982962
424710614991173
429732615008685
429767615008825
430408315011541
431376015015759
431528015016389
431771315016938
432169615018592
432171315018600
432172015018604
432172115018607
432172315018613
432172515018615
432172615018618
432204215018763
432205515018771
432205815018777
432206015018780
432206415018781
432220015018834
432267015019029
432845215021394
432847615021411
440717015050340
441945415054398
467623015105965
487467215162994
502447615204211
665516815453405
670960715484565


Changes incorporated in this version: 6655168 6709607

Patches accumulated and obsoleted by this patch: 110960-02 111466-01

Patches which conflict with this patch:

Patches required with this patch: 111302-01 (or greater)

Obsoleted by:

Files included with this patch:

/etc/inet/services
/usr/bin/tftp
/usr/include/arpa/tftp.h
/usr/sbin/in.tftpd
/usr/sbin/snoop

Problem Description:

6655168 snoop has problems capturing and displaying SMB traffic
6709607 interpret_netbios_ses calls interpret_smb with wrong data length
 
(from 108964-10)
 
5024476 snoop: dlpromisconreq:  strgetmsg: MOREDATA
4874672 snoop: can drive into the ditch while parsing bogus DNS packets
4328452 snoop: simple filter expression can cause infinite loop
 
(from 108964-09)
 
4011822 need an error code HSM software can return when file is offline
 
(from 108964-08)
 
4407170 some IPv6 extension headers confuse snoop
 
(from 108964-07)
 
4676230 Signal 11 errors(sigsegv) when snooping ldap port(389)
 
(from 108964-06)
 
	This revision accumulates feature point patch 111466-01.
 
(from 108964-05)
 
	This revision accumulates feature point patch 110960-02.
 
(from 108964-04)
 
4304083 tftp incorrectly handles get for a non-existent file
 
(from 108964-03)
 
1110881 tftp cannot get file of 16MB over and up
 
(from 108964-02)
 
4321726 when HA receives regreq with buffer overflowing extension, it core dumps
4321713 granted lifetime keeps increasing as registration is refreshed
4321721 FA shouldn't reject regreq with both MH and MA
4321725 FA expects to receive challenge-response extension before MH auth
4321720 FA should discard message if it contains unrecognized extension 0-127
4313760 Reg Request with same ILP for HA and Coaddr times out
4321723 snoop parses agent advertisement wrong
4322200 mipagentconf and mipagentstat don't setlocaled
4322670 pool addresses wrong due to byte ordering when mipagent run on x86
4321696 after a successful reg-dereg, HA core dumps
4317713 sample mipagent.conf files have inconsistent info which might be confusing
4322042 AAA open session result not getting propagated into registration response
4322055 mipagent should accept an HA of 0xffffffff when request comes from AAA
4322058 remove #if 0 code lines left in AAA code
4322060 add aaaSPI per current AAA extension specification
4322064 dynamic key info from AAA server not being propagated to agents correctly
4297326 mipagentstat: command line option '-v' should be reserved for 'verbose'
4315280 debug flag defined which includes test code NOT to be shipped to customers
 
(from 108964-01)
 
4297676 need Mobile IP support in Solaris
 
(from 110960-02)
 
4247106 DHCP server is too slow in servicing a large number of clients
 
(from 110960-01)
 
4218869 add decode for LDAP
 
(from 111466-01)
 
4328476 RFE: PPPoE (RFC 2516) client support in Solaris
4419454 idle option doesn't work if lcp-echo-interval/chap-interval is used


Patch Installation Instructions:
--------------------------------
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-10 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.


Special Install Instructions:
-----------------------------

IMPORTANT NOTE:  Before applying this patch, please make sure your /etc/inet/services file does
not have entries starting with whitespace characters. Such entries are
violation of published standards and will be removed by this patch.
 
NOTE 1:  To get the Mobile IP support, please also install the following
         packages:
 
         SUNWmipr (Mobile-IP configuration and startup scripts)
         SUNWmipu (Mobile-IP daemon and utilities)
 
NOTE 2:  To get the complete support for EDHCP, please also install this
         new package:
 
         SUNWdhcsb  Binary File Format Data Module for BOOTP/DHCP Services
 
         and the following patches:
 
         109077-02 (or greater)  dhcp server and admin patch
         109906-06 (or greater)  dhcpagent, dhcpinfo, ifconfig, netstat patch
         111304-01 (or greater)  nfs_dlboot patch
         111306-01 (or greater)  sun4d/sun4m/sun4u inetboot patch
         111308-01 (or greater)  libmtmalloc.so.1 patch
         111310-01 (or greater)  libdhcpagent.so.1 patch
 
NOTE 3:  To get the complete support for PPP over Ethernet, please also
         install the new package, SUNWpppdt (Solaris PPP Tunneling), from
         Solaris 8 Update 6 (10/01) Release and the following patch:
 
         111299-02 (or greater)  PPP patch


README -- Last modified date: Friday, November 9, 2012