Details:
This patch resolves a buffer overflow vulnerability in VERITAS Cluster Server 4.0  on Red Hat Enterprise Linux (RHEL) 3.0 for the i686 architecture.

This patch can be applied to 4.0 MP2 only. All other 4.0 versions must first be upgraded to MP2:http://support.veritas.com/docs/278954

All releases of VERITAS Cluster Server 4.0 for RHEL 3.0 are affected and should be upgraded to MP2 and this patch applied. For further information on this vulnerability refer to http://support.veritas.com/docs/279870 , which also contains links to patches for other platforms and versions.

This patch also contains a number of fixes for incidents not related to security (see below).

Refer to the information included in the patch file for installation instructions



Download Now  -  22348 K
File Name: RHEL30i686_VCS4.0MP2+i18n-secfix-e418977a.tar_279952.gz
File Type: Patch

Click Below to Browse the FTP files by Product:
ftp.support.veritas.com/pub/support/products

Related Documents:

279870: Symantec Security Advisory SYM05-023 VERITAS Cluster Server for UNIX: Local Access Buffer Overflow Vulnerability
 http://support.veritas.com/docs/279870

Supplemental Material:

System: Ref.#	Description
ETrack: 414330	Localization changes to VRTSvcs.
ETrack: 415105	When online resource faults, notification not sent.
ETrack: 322217	Removed unnecessary call from hacf.
ETrack: 426545	Add engine check for username password length.
ETrack: 426548	Packaging changes to remove root suid in some binaries.
ETrack: 423031	VCS fails to bring parent group online after child group fails.
ETrack: 424476	Unexpected cancellation of service threads.

---