Compaq Tru64 Kernel Race Condition Vulnerability

Bugtraq ID:	3996
Class:	Race Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Jan 30 2002 12:00AM
Updated:	Jan 30 2002 12:00AM
Credit:	The discovery of this vulnerability is credited to Compaq.
Vulnerable:	Compaq Tru64 5.1 a Compaq Tru64 5.1 PK4 (BL18) Compaq Tru64 5.1 PK3 (BL17) Compaq Tru64 5.1 Compaq Tru64 5.0 a PK3 (BL17) Compaq Tru64 5.0 PK4 (BL17) Compaq Tru64 5.0 Compaq Tru64 4.0 g PK3 (BL17) Compaq Tru64 4.0 g Compaq Tru64 4.0 f PK7 (BL18) Compaq Tru64 4.0 f PK6 (BL17) Compaq Tru64 4.0 f Compaq Tru64 4.0 d PK9 (BL17) Compaq Tru64 4.0 d
Not Vulnerable:

Compaq Tru64 Kernel Race Condition Vulnerability

The Compaq Tru64 Unix kernel contains a race condition vulnerability. The vulnerability is locally exploitable, and may allow for an attacker to modify any file on the filesystem. Root access can be obtained through modification of critical files such as '/etc/passwd' and others.

Compaq Tru64 Kernel Race Condition Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Compaq Tru64 Kernel Race Condition Vulnerability

Solution:
Compaq has released fixes. Note that systems must be upgraded to the listed Patch Kit versions before these fixes can be applied.


Compaq Tru64 4.0 f PK6 (BL17)

• Compaq DUV40FB17-C0061801-12860-E-20020115.tar
  The prerequisite for installing this patch kit is that you must have installed Tru64 UNIX 4.0F and PK6 (BL17).
  http://ftp1.support.compaq.com/public/unix/v4.0f/

Compaq Tru64 4.0 f

• Compaq DUV40FB17-C0061801-12860-E-20020115.tar
  The prerequisite for installing this patch kit is that you must have installed Tru64 UNIX 4.0F and PK6 (BL17).
  http://ftp1.support.compaq.com/public/unix/v4.0f/

Compaq Tru64 4.0 g PK3 (BL17)

• Compaq T64V40GB17-C0009303-12856-E-20020115.tar
  The prerequisite for installing this patch kit is that you must have installed Tru64 UNIX 4.0G and PK3 (BL17).
  http://ftp1.support.compaq.com/public/unix/v4.0g/

Compaq Tru64 4.0 g

• Compaq T64V40GB17-C0009303-12856-E-20020115.tar
  The prerequisite for installing this patch kit is that you must have installed Tru64 UNIX 4.0G and PK3 (BL17).
  http://ftp1.support.compaq.com/public/unix/v4.0g/

Compaq Tru64 4.0 d

• Compaq DUV40DB17-C0061401-12858-E-20020115.tar
  The prerequisite for installing this patch kit is that you must have installed Tru64 UNIX 4.0D and PK9 (BL17).
  http://ftp1.support.compaq.com/public/unix/v4.0d/

Compaq Tru64 4.0 d PK9 (BL17)

• Compaq DUV40DB17-C0061401-12858-E-20020115.tar
  The prerequisite for installing this patch kit is that you must have installed Tru64 UNIX 4.0D and PK9 (BL17).
  http://ftp1.support.compaq.com/public/unix/v4.0d/

Compaq Tru64 5.0

• Compaq T64V50B17-C0006900-12861-E-20020115.tar
  The prerequisite for installing this patch kit is that you must have installed Tru64 UNIX 5.0 and PK4 (BL17).
  http://ftp1.support.compaq.com/public/unix/v5.0/

Compaq Tru64 5.0 PK4 (BL17)

• Compaq T64V50B17-C0006900-12861-E-20020115.tar
  The prerequisite for installing this patch kit is that you must have installed Tru64 UNIX 5.0 and PK4 (BL17).
  http://ftp1.support.compaq.com/public/unix/v5.0/

Compaq Tru64 5.0 a PK3 (BL17)

• Compaq T64V50AB17-C0017601-12862-E-20020115.tar
  The prerequisite for installing this patch kit is that you must have installed Tru64 UNIX 5.0A and PK3 (BL17).
  http://ftp1.support.compaq.com/public/unix/v5.0a/

Compaq Tru64 5.1 PK4 (BL18)

• Compaq T64V51B18-C0094800-12864-E-20020115.tar
  The prerequisite for installing this patch kit is that you must have installed Tru64 UNIX 5.1 and PK4 (BL18).
  http://ftp1.support.compaq.com/public/unix/v5.1/

Compaq Tru64 5.1

• Compaq T64V51B18-C0094800-12864-E-20020115.tar
  The prerequisite for installing this patch kit is that you must have installed Tru64 UNIX 5.1 and PK4 (BL18).
  http://ftp1.support.compaq.com/public/unix/v5.1/

Compaq Tru64 Kernel Race Condition Vulnerability

References:

• Tru64 Homepage (Compaq)