Re: login security bug

From: Scott Howard (scott@doc.net.au)
Date: 12/14/01 

Date: Sat, 15 Dec 2001 06:08:33 +1100
From: Scott Howard <scott@doc.net.au>
To: James Lick <jlick@drivel.com>

On Fri, Dec 14, 2001 at 03:04:32AM +0800, James Lick wrote:
> For the login security bug recently announced by CERT, is there any way to
> fix this currently without turning off telnet and rlogin? Much as I'd
> like to take this opportunity to force everyone to use ssh, I can't. I
> also don't have support so no t-patches for me.

The patches for this bug have been released. The details are :

    111085-02 SunOS 5.8: /usr/bin/login patch
    111086-02 SunOS 5.8_x86: /usr/bin/login patch
    112300-01 SunOS 5.7:: usr/bin/login Patch
    112301-01 SunOS 5.7_x86:: usr/bin/login Patch
    105665-04 SunOS 5.6: /usr/bin/login patch
    105666-04 SunOS 5.6_x86: /usr/bin/login patch
    106160-02 SunOS 5.5.1: /usr/bin/login patch

  Scott.