Details:
This patch resolves a buffer overflow vulnerability in VERITAS Cluster Server 4.0 for AIX.  

This patch can be applied to MP2 only.  All other 4.0 versions must first be upgraded to 4.0 MP2:http://support.veritas.com/docs/278358

All versions of VERITAS Cluster Server 4.0 for AIX are affected and should be upgraded to MP2 and this patch applied. For further information on this vulnerability, refer to http://support.veritas.com/docs/279870 ,which also contains links to patches for other platforms and versions.

This patch also contains a number of fixes for incidents not related to security (see below).

Refer to the information included in the patch file for installation instructions


 
Download Now  -  37675 K
File Name: AIX_VCS4.0MP2+i18n-secfix-e418977a_279946.tar.Z
File Type: Patch

Click Below to Browse the FTP files by Product:
ftp.support.veritas.com/pub/support/products

Related Documents:

278358:   VERITAS Storage Solutions and Cluster File Solutions for AIX 4.0 Maintenance Pack 2
 http://support.veritas.com/docs/278358


279870: Symantec Security Advisory SYM05-023 VERITAS Cluster Server for UNIX: Local Access Buffer Overflow Vulnerability
 http://support.veritas.com/docs/279870

Supplemental Material:

System: Ref.#	Description
ETrack: 426548	Packaging changes to remove root suid in some binaries.
ETrack: 284786	When server returns ECONREFUSED, localhost should retry before exit.
ETrack: 296023	Fixed formatting of hastatus -summary output.
ETrack: 312812	Modify halog for UTF8 encoding.
ETrack: 414330	Localization changes to VRTSvcs.
ETrack: 415105	When online resource faults, notification not sent.
ETrack: 423031	VCS fails to bring parent group online after child group fails.
ETrack: 424476	Unexpected cancellation of service threads.
ETrack: 426545	Add engine check for username password length.

---