Patch-ID# 116453-03

Download this patch from My Oracle Support

READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE.

For further information on patching best practices and resources, please see the following links:

Keywords: security sadmind vulnerability
Synopsis: SunOS 5.9: sadmind patch
Date: May/21/2009

Install Requirements: Reboot after installing this patch to activate the changes delivered. An alternative may be specified in the Special Install Instructions.

Solaris Release: 9

SunOS Release: 5.9

Unbundled Product:

Unbundled Release:

Xref: This patch available for x86 as patch 116454

Topic: SunOS 5.9: sadmind patch

Relevant Architectures: sparc

BugId's fixed with this patch: 4079984 6710920 6765885 6766465

Changes incorporated in this version: 6710920 6765885 6766465

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch:

Patches required with this patch:

Obsoleted by:

Files included with this patch:

/usr/sbin/sadmind
/usr/snadm/lib/libadmapm.so
/usr/snadm/lib/libadmapm.so.2
/usr/snadm/lib/libadmcom.so
/usr/snadm/lib/libadmcom.so.2

Problem Description:

6710920 sadmind buffer overflow vulnerability
6765885 [CVE-2008-3869] sadmind heap overflow vulnerability
6766465 [CVE-2008-3870] integer overflow in sadmind
 
(from 116453-02)
 
        This revision essentially duplicates revision -01.
 
(from 116453-01)
 
4079984 sadmind default security level vulnerability

Patch Installation Instructions:

--------------------------------
 
Please refer to the man pages for instructions on using 'patchadd'
and 'patchrm' scripts provided with Solaris.
 
The following example installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/123456-07
 
The following example removes a patch from a standalone system:
 
       example# patchrm 123456-07
 
For additional examples please see the appropriate man pages. Any
other special or non-generic installation instructions should be
described below as special instructions.

Special Install Instructions:

-----------------------------
 
None.

README -- Last modified date: Monday, June 13, 2011