Details:
 This patch resolves a buffer overflow vulnerability in VERITAS Cluster Server 2.2 for VMWare ESX 2.1.

This patch can be applied to 2.2 MP2 only. All other 2.2 versions must first be upgraded to 2.2 MP2: http://support.veritas.com/docs/267931 

All versions of VERITAS Cluster Server 2.2 for ESX 2.1 are affected, and should be upgraded to MP2 and this patch applied.  For further information on this vulnerability, refer to http://support.veritas.com/docs/279870 which also contains links to patches for other platforms and versions.

This patch also contains a number of fixes for incidents not related to security (see below).

Refer to the information included in the patch file for installation instructions



Download Now  -  12650 K
File Name: ESX_VCS2.2_MP2_i18n-secfix_e418977a.tar_279953.gz
File Type: Patch

Click Below to Browse the FTP files by Product:
ftp.support.veritas.com/pub/support/products

Related Documents:

267931: VERITAS Cluster Server (tm) 2.2 Maintenance Pack 2 for Linux - An Introduction
 http://support.veritas.com/docs/267931


279870: Symantec Security Advisory SYM05-023 VERITAS Cluster Server for UNIX: Local Access Buffer Overflow Vulnerability
 http://support.veritas.com/docs/279870

Supplemental Material:

System: Ref.#	Description
ETrack: 255994	Modify HAD to use syslog API to log event messages.
ETrack: 322217	Removed unnecessary call from hacf.
ETrack: 426545	Add engine check for username password length.
ETrack: 426548	Packaging changes to remove root suid in some binaries.

---