-----BEGIN PGP SIGNED MESSAGE-----

CA-95:17.README
Issue date: December 12, 1995
Date of last revision: February 21, 1996

This file is a supplement to CERT advisory CA-95:17, "rpc.ypupdated
Vulnerability." We update this file as additional information becomes
available.

Note: We recommend checking with your vendor for current MD5 checksum values.
      After we publish checksums in advisories and READMEs, the checksums may
      become obsolete because the files they refer to have been updated.

The text below originally appeared as an appendix in the advisory.

On February 21, 1996, an entry was added for IBM Corporation.

On December 18, 1995, modifications were made to the entries for
Digital Equipment and Hewlett-Packard.

.....................................................................
Below is information we have received from vendors. If you do not see your
vendor's name below, please contact the vendor directly for information.

Apple Computer, Inc.
- -------------------
        A/UX does not include this functionality and is
        therefore not vulnerable.

Berkeley Software Design, Inc. (BSDI)
- -------------------------------------
        BSD/OS by Berkeley Software Design, Inc. (BSDI) is not vulnerable.

Data General Corporation
- ------------------------
        Data General believes the DG/UX operating system to be NOT
        vulnerable. This includes all supported release, DG/UX 5.4
        Release 3.10, DG/UX Release 4.10 and all related Trusted DG/UX
        releases.

Digital Equipment Corporation
- -----------------------------
        OSF/1 on all Digital platforms is not vulnerable.

//////////////////
Modified December 18, 1995

	 Digital ULTRIX platforms are not vulnerable to this problem.

//////////////////


Hewlett-Packard Company
- -----------------------
//////////////////
Modified December 18, 1995

	HP-UX versions 10.01, 10.10, and 10.20 are vulnerable (versions
	prior to HP-UX 10.01 are not vulnerable).
	
//////////////////

        Solution: Do not run rpc.ypupdated. rpc.ypupdated is used
        when adding or modifying the public:private key pair in the NIS
        map public key.byname via the chkey command interface.
        rpc.ypupdated should ONLY be run while changes are being made,
        then terminated when the changes are complete.
        Make sure you re-kill rpc.ypupdated after each reboot.


IBM Corporation
- ---------------
//////////////////
Added February 21, 1996

  AIX 3.2
  -------
    APAR - IX55360
    PTF  - U440666

    To determine if you have this PTF on your system, run the following
    command:

       lslpp -lB U440666


  AIX 4.1
  -------
    APAR - IX55363

    To determine if you have this fix on your system, run the following
    command:

       lslpp -h | grep -p bos.net.nis.server

    Your version of bos.net.nis.server should be 4.1.4.1 or later.


  To Order
  --------
    APARs may be ordered using FixDist or from the IBM Support Center.
    For more information on FixDist reference URL:

       http://aix.boulder.ibm.com/pbin-usa/fixdist.pl/

    or send e-mail to aixserv@austin.ibm.com with a subject of "FixDist".



//////////////////

NEC Corporation
- ---------------
               OS               Version        Status
        ------------------   ------------   --------------------------
        EWS-UX/V(Rel4.0)     R1.x - R2.x    not vulnerable
                             R3.x - R6.x    vulnerable

        EWS-UX/V(Rel4.2)     R7.x - R10.x   vulnerable

        EWS-UX/V(Rel4.2MP)   R10.x          vulnerable

        UP-UX/V              R2.x           not vulnerable
                             R3.x - R4.x    vulnerable

        UP-UX/V(Rel4.2MP)    R5.x - R7.x    vulnerable

        UX/4800              R11.x          vulnerable
        ---------------------------------------------------------------

        The following is a workaround for 48 series.

           ypupdated program is started by the /etc/rc2.d/S75rpc script.
           First, determine if the server is running, killing it if it
           is. Then, rename ypupdated so that the /etc/rc2.d/S75rpc
           script will not find and therefore start it when the system
           reboots.

# uname -a
UNIX_System_V testux 4.2 1 R4000 r4000
# /sbin/ps -ef | /usr/bin/grep ypupdated
    root   359     1  0 08:20:05 ?        0:00 /usr/lib/netsvc/yp/ypupdated
    root 19938   836  0 23:13:20 pts/1    0:00 /usr/bin/grep ypupdated
# /usr/bin/kill 359
# /sbin/mv /usr/lib/netsvc/yp/ypupdated /usr/lib/netsvc/yp/ypupdated.CA-95:17
# /usr/bin/chmod 0 /usr/lib/netsvc/yp/ypupdated.CA-95:17

        --------------------------
        Contacts for further information:
        E-mail:UX48-security-support@nec.co.jp


Open Software Foundation
- ------------------------
        YP/NIS is not part of the OSF/1 Version 1.3 offering.
        Hence, OSF/1 Version 1.3 is not vulnerable.

Sequent Computer Systems
- ------------------------
        Sequent does not support the product referred to in this advisory, and
        as such is not vulnerable.

Silicon Graphics Inc. (SGI)
- ---------------------------
        IRIX 3.x, 4.x, 5.0.x, 5.1.x, 5.2: vulnerable.
                Turn off rpc.ypudated in inetd.conf; it is shipped with
                this turned on.
        IRIX 5.3, 6.0, 6.0.1: rpc.ypupdated was off as distributed.
                Turn off if you have turned it on.

Solbourne
- ---------
        Not vulnerable.

Sun Microsystems, Inc.
- ----------------------

        SunOS 4.1.X is vulnerable.

[Note from CERT Coordination Center: We have examined Solaris and found that
Solaris 2.x is not shipped with NIS support and the vulnerability is not
present. There is an extra software package named the "Solaris Name Service
Transition Kit" which in version 1.2, the current version, does not contain
the rpc.ypupdated program and is therefore not vulnerable. However, version
1.0 of the Solaris Name Service Transition Kit does contain rpc.ypupdated and
is therefore presumed to be vulnerable.]





-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMaMyJnVP+x0t4w7BAQG8FwP/Sis8KuXnQo0aN5JoAY58ErJ4x7TCdZf4
zbyXzWnGXaEV/C7fVVzG9ET5lMpQEHkThs8hQ9IT2x41Fz+VO+COdPZwjAVZXz8p
IgV11oF0HkheqjJcO9AiG0vhCSxZobWFI4F/EacXoaaOJEeMTPPDV4yo0yV/YOqC
XKWdeg6AHno=
=aQcz
-----END PGP SIGNATURE-----
