Patch Name: PHCO_5415 Patch Description: s700 9.09+ protect against malicious misuse of at(1) Creation Date: 95/04/11 Post Date: 95/05/09 Hardware Platforms - OS Releases: s700: 9.09+ Products: N/A Filesets: CMDS-MIN Automatic Reboot?: No Status: General Release Critical: No Path Name: /hp-ux_patches/s700/9.X/PHCO_5415 Symptoms: PHCO_5415: Possible malicious misuse of at. Defect Description: PHCO_5415: Possible malicious misuse of at. SR: 4701285411 Patch Files: /usr/bin/at what(1) Output: /usr/bin/at: $Revision: 70.19.4.11 $ $Revision: 70.13.3.6.1.1 $ at.c $Revision: 70.13.3.6.1.1 $ $Date: 95/04/10 17:56:17 $ PATCH_9.09 (PHCO_5415) sum(1) Output: 59318 104 /usr/bin/at Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: None Supersedes: None Equivalent Patches: None Patch Package Size: 110 Kbytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Copy the patch to your /tmp directory and unshar it: cd /tmp cp patch_source/PHCO_5415 . sh PHCO_5415 3. Become root and run update: /etc/update 4. Use the cursor keys to select "Change Source or Destination ->" and press [Return]. 5. Select "From Tape Device to Local System ..." in the Change window and 6. Change "Source: /dev/rmt/0m" to "Source: /tmp/PHCO_5415.updt" 7. Press "Done" (f4). 8. Follow the standard directions for update. Update moves the original software to /system/PHCO_5415/orig. Keep this file to recover from any potential problems. You should move the .text file to /system/PHCO_5415 for future reference. To put this patch on a magnetic tape and update from the tape drive, use dd: dd if=PHCO_5415.updt of=/dev/rmt/0m bs=2048 Special Installation Instructions: None