Patch Name: PHCO_5416 Patch Description: s700 9.09 protect against malicious misuse of at(1) Creation Date: 95/04/11 Post Date: 95/05/09 Hardware Platforms - OS Releases: s700: 9.09 Products: N/A Filesets: CMDS-MIN Automatic Reboot?: No Status: General Release Critical: No Path Name: /hp-ux_patches/s700/9.X/PHCO_5416 Symptoms: PHCO_5416: Possible malicious misuse of at. Defect Description: PHCO_5416: Possible malicious misuse of at. SR: 4701285411 Patch Files: /usr/bin/at /usr/bin/crontab what(1) Output: /usr/bin/at: $Revision: 70.19.4.8 $ $Revision: 70.13.3.3.1.1 $ at.c $Revision: 70.13.3.3.1.1 $ $Date: 95/04/05 13:05:44 $ PATCH_9.09 (PHCO_5416) /usr/bin/crontab: $Revision: 70.19.4.11 $ crontab.c $Revision: 72.3.1.1.1.1.2.1 $ $Date: 9 5/04/05 16:15:04 $ PATCH_9.09 (PHCO_5416) sum(1) Output: 54194 104 /usr/bin/at 11399 64 /usr/bin/crontab Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: None Supersedes: None Equivalent Patches: None Patch Package Size: 140 Kbytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Copy the patch to your /tmp directory and unshar it: cd /tmp cp patch_source/PHCO_5416 . sh PHCO_5416 3. Become root and run update: /etc/update 4. Use the cursor keys to select "Change Source or Destination ->" and press [Return]. 5. Select "From Tape Device to Local System ..." in the Change window and 6. Change "Source: /dev/rmt/0m" to "Source: /tmp/PHCO_5416.updt" 7. Press "Done" (f4). 8. Follow the standard directions for update. Update moves the original software to /system/PHCO_5416/orig. Keep this file to recover from any potential problems. You should move the .text file to /system/PHCO_5416 for future reference. To put this patch on a magnetic tape and update from the tape drive, use dd: dd if=PHCO_5416.updt of=/dev/rmt/0m bs=2048 Special Installation Instructions: None