Patch-ID# 107022-11 Keywords: security locales extended service attack rpc.cmsd file descriptors Synopsis: CDE 1.3: Calendar Manager patch Date: Sep/21/2004 Install Requirements: See Special Install Instructions Solaris Release: 7 SunOS Release: 5.7 Unbundled Product: CDE Unbundled Release: 1.3 Xref: This patch available for x86 as 107023 Topic: Relevant Architectures: sparc BugId's fixed with this patch: 4117156 4175236 4184188 4192354 4203585 4213057 4230754 4236395 4285729 4641721 Changes incorporated in this version: 4641721 4203585 Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: 106942-09 or greater 108374-01 or greater Obsoleted by: Files included with this patch: /usr/dt/bin/rpc.cmsd /usr/dt/bin/sdtcm_convert /usr/dt/lib/libcsa.so.0 /usr/dt/share/man/man1/dtcm.1 /usr/dt/bin/dtcm Problem Description: 4203585 Possible denial of service attack against rpc.cmsd per bug 4124715 (reworked) 4641721 rpc.cmsd gets out of file descriptors -> unusable (reworked) (from 107022-10) 4641721 rpc.cmsd gets out of file descriptors -> unusable (from 107022-09) 4203585 Possible denial of service attack against rpc.cmsd per bug 4124715 (from 107022-08) 4285729 all partial locales: /usr/dt/bin/dtcm does not print extended characters (from 107022-07) 4236395 dtcm segv trying to pop-up a reminder (from 107022-06) 4175236 Reminder mail sent from calendar is not internationalized. (from 107022-05) 4213057 Add Tooltip functionality (from 107022-04) 4192354 non-root users outside a domain can't view a calendar on a Solaris (from 107022-03) 4230754 Possible buffer overflows in rpc.cmsd (from 107022-02) 4117156 Users on SunOS 4.1.3 are unable to access calendar located on Solaris 2 (from 107022-01) 4184188 sdtcm_convert has buffer overflow Patch Installation Instructions: -------------------------------- For Solaris 2.0-2.6 releases, refer to the Install.info file and/or the README within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. For Solaris 7 release, refer to the man pages for instructions on using 'patchadd' and 'patchrm' scripts provided with Solaris. Any other special or non-generic installation instructions should be described below as special instructions. The following example installs a patch to a standalone machine: example# patchadd /var/spool/patch/104945-02 The following example removes a patch from a standalone system: example# patchrm 104945-02 For additional examples please see the appropriate man pages. Special Install Instructions: ----------------------------- See the README for patch 108374 for instructions on enabling Tooltips. Note: For a complete fix for bug: 4285729 all partial locales: /usr/dt/bin/dtcm does not print extended Please also install patch: 111192-01 Cannot print extended characters from dtcm (or newer) README -- Last modified date: Tuesday, September 21, 2004