-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

SECURITY BULLETIN

REVISION: 0


TITLE: SSRT0845U HP Tru64 UNIX, HP-UX stdio Potential
       Security Vulnerability


NOTICE: There are no restrictions for distribution of this
Bulletin provided that it remains complete and intact.

RELEASE DATE: March 2003


SEVERITY:  High

SOURCE:  Hewlett-Packard Company
         Software Security Response Team

REFERENCE:  SSRT0845U, VU#809347, FreeBSD-SA-02:23.stdio


PROBLEM SUMMARY:

This bulletin will be posted to the support website
within 24 hours of release to -
http://thenew.hp.com/country/us/eng/support.html

Use the SEARCH IN feature box, enter SSRT0845 in the
search window.



    SSRT0845U stdio file descriptors (Severity - High)


A potential security vulnerability has been identified in
the HP Tru64 UNIX operating system which may result in
non-privileged users gaining unauthorized access to files
or privileged access on the system.  This potential
vulnerability may be in the form of a local and remote
security domain risk.


VERSIONS IMPACTED:

  HP Tru64 UNIX V5.1A

  HP Tru64 UNIX V5.1

  HP Tru64 UNIX V5.0A

  HP Tru64 UNIX V4.0G

  HP Tru64 UNIX V4.0F

  HP-UX



NOT IMPACTED:


  HP-MPE/ix

  HP NonStop Servers

  HP OpenVMS



RESOLUTION:


  HP-UX



  At the time of writing this document, Hewlett
Packard is currently investigating the potential impact
to HP's released Operating System software products.
As further information becomes available HP will provide
notice of the availability of any necessary patches
through standard security bulletin announcements and
be available from your normal HP Services support channel.



  HP TRU64 UNIX

  Early Release Patches (ERPs) are now available for all
supported versions of HP Tru64 UNIX. The ERP kits use dupatch
to install and will not  install over any Customer-Specific-Patches
(CSPs) which have file intersections with the ERPs. Contact your
normal support channel and request HP Tru64 services elevate a
case to  Support Engineering if a CSP must be merged with one
of the ERPs.

Please review the README file for each patch prior to installation.

NOTE: These patches can be installed on top of SSRT1-41U,
      SSRT0742U, and SSRT0759U or standalone. However, in order
      to get the complete set of fixes, SSRT1-41U, SSRT0742U,
      and SSRT0759U should be installed before installing
      SSRT0845U.

The fixes contained in this set of ERP kits will be available
in the following mainstream patch kits:

      o  HP Tru64 UNIX 4.0G   PK4

      o  HP Tru64 UNIX 4.0F   PK8

The following ERP kits are applicable to any system running
HP Tru64 UNIX or HP TruCluster Server software.

    HP Tru64 UNIX/TruCluster Server 5.1A
    PREREQUISITE: V5.1A with PK3 (BL3) installed
    ERP Kit Name: T64V51AB3-C0106401-17256-ES-20030306.tar 
    Kit Location:
ftp://ftp1.support.compaq.com/public/unix/v5.1a/    

    HP Tru64 UNIX/TruCluster Server 5.1 
    PREREQUISITE: V5.1 with PK6 (BL20) installed
    ERP Kit Name: T64V51B20-C0172301-17255-ES-20030306.tar
    Kit Location:
ftp://ftp1.support.compaq.com/public/unix/v5.1/  

    HP Tru64 UNIX/TruCluster Server 5.1
    PREREQUISITE: V5.1 with PK5 (BL19) installed
    ERP Kit Name: T64V51B19-C0143704-17254-ES-20030306.tar
    Kit Location:
ftp://ftp1.support.compaq.com/public/unix/v5.1/

    HP Tru64 UNIX/TruCluster Server 5.0A
    PREREQUISITE: V5.0A with PK3 (BL17) installed
    ERP Kit Name: T64V50AB17-C0031400-17220-ES-20030305.tar
    Kit Location:
ftp://ftp1.support.compaq.com/public/unix/v5.0a/

    HP Tru64 UNIX/TruCluster Server 4.0G
    PREREQUISITE: V4.0G with PK3 (BL17) installed
    ERP Kit Name: T64V40GB17-C0028500-17206-ES-20030305.tar
    Kit Location:
ftp://ftp1.support.compaq.com/public/unix/v4.0g/

    HP Tru64 UNIX/TruCluster Server 4.0F
    PREREQUISITE: V4.0F with PK7 (BL18) installed
    ERP Kit Name: DUV40FB18-C0092600-17205-ES-20030305.tar
    Kit Location:
ftp://ftp1.support.compaq.com/public/unix/v4.0f/



MD5 and SHA1 checksums are available in the public patch
notice for the ERP kits. You can find information on how
to verify MD5 and SHA1 checksums at:
http://www.support.compaq.com/patches/whats-new.shtml



After completing the update, HP strongly recommends that
you perform an immediate backup of your system disk so
that any subsequent restore operations begin with updated
software. Otherwise, you must reapply the update after a
future restore operation. Also, if at some future time you
upgrade your system to a later patch version, you may need
to reapply the appropriate update.



The SSRT thanks FreeBSD and Paul Szabo for reporting
this potential vulnerability to HP.



SUPPORT: 

For further information, contact HP Services.



SUBSCRIBE: 

To subscribe to automatically receive future
Security Advisories from the Software Security Response
Team via electronic mail:

http://www.support.compaq.com/patches/mailing-list.shtml 

REPORT: To report a potential security vulnerability with
any HP supported product, send email to: security-alertat_private

As always, HP urges you to periodically review your system
management and security procedures. HP will continue to review
and enhance the security features of its products and work
with our customers to maintain and improve the security and
integrity of their systems.  
"HP is broadly distributing this Security Bulletin in order
to bring to the attention of users of the affected HP
products the important security information contained
in this Bulletin. HP recommends that all users determine
the applicability of this information to their individual
situations and take appropriate action. HP does not warrant
that this information is necessarily accurate or complete
for all user situations and, consequently, HP will not be
responsible for any damages resulting from user's use or
disregard of the information provided in this Bulletin."

©Copyright 2002 Hewlett-Packard Company 
Hewlett-Packard Company shall not be liable for technical
or editorial errors or omissions contained herein. The
information in this document is subject to change without
notice. Hewlett-Packard Company and the names of
Hewlett-Packard products referenced herein are trademarks
of Hewlett-Packard Company in the United States and other
countries. Other product and company names mentioned herein
may be trademarks of their respective owners.

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0.1

iQA/AwUBPnYK3DnTu2ckvbFuEQKLAACgpqkCWp/Rw23YF2c81WU5sH/2ZmMAoK4v
lpLc25SEZIeD92ZvBhfu8myk
=SGRq
-----END PGP SIGNATURE-----
b‹š­ç.®·§¶\¬¹»®&ÞvÚ,yË«ŠÜš²û¥ªÇœº¸­ÉúºÇ(N‹§²æìr¸›zǧu¦åjy™¨¥¶‰^j÷¬yË«ŠÜ¶×~8NX¬¶Ë©¦Šír‰©j§(