Patch Name: PHSS_27936

Patch Description: s700_800 11.00 OV NNM6.0x http server fix

Creation Date: 02/12/13

Post Date:  02/12/17

Hardware Platforms - OS Releases:
	s700: 11.00
	s800: 11.00

Products:
	OpenView Network Node Manager 6.00, 6.01

Filesets:
	OVPlatform.OVWWW-SRV,fr=B.06.00.00,fa=HP-UX_B.11.00_32/64,v=HP
	OVPlatform.OVWWW-SRV,fr=B.06.01.00,fa=HP-UX_B.11.00_32/64,v=HP

Automatic Reboot?: No

Status: General Release

Critical: No

Category Tags:
	defect_repair general_release

Path Name: /hp-ux_patches/s700_800/11.X/PHSS_27936

Symptoms:
	PHSS_27936:
	http server process was not handling the bad requests.

Defect Description:
	PHSS_27936:
	http server process cannot handle bad HTTP request types
	correctly.
	Resolution:
	Code has been added for handling the bad requests properly.

Enhancement:
	No

SR:
	8606276971

Patch Files:
	
	OVPlatform.OVWWW-SRV,fr=B.06.00.00,fa=HP-UX_B.11.00_32/64,
		v=HP:

	OVPlatform.OVWWW-SRV,fr=B.06.01.00,fa=HP-UX_B.11.00_32/64,
		v=HP:
	/opt/OV/httpd/bin/ab
	/opt/OV/httpd/bin/apachectl
	/opt/OV/httpd/bin/apxs
	/opt/OV/httpd/bin/dbmmanage
	/opt/OV/httpd/bin/htdigest
	/opt/OV/httpd/bin/htpasswd
	/opt/OV/httpd/bin/httpd
	/opt/OV/httpd/bin/logresolve
	/opt/OV/httpd/bin/rotatelogs

what(1) Output:
	
	OVPlatform.OVWWW-SRV,fr=B.06.00.00,fa=HP-UX_B.11.00_32/64,
		v=HP:
	/opt/OV/httpd/bin/ab:
		None
	/opt/OV/httpd/bin/apachectl:
		None
	/opt/OV/httpd/bin/apxs:
		None
	/opt/OV/httpd/bin/dbmmanage:
		None
	/opt/OV/httpd/bin/htdigest:
		None
	/opt/OV/httpd/bin/htpasswd:
		None
	/opt/OV/httpd/bin/httpd:
		patched for CAN-2002-0392 [CERT VU#944335]
	/opt/OV/httpd/bin/logresolve:
		None
	/opt/OV/httpd/bin/rotatelogs:
		None

cksum(1) Output:
	
	OVPlatform.OVWWW-SRV,fr=B.06.00.00,fa=HP-UX_B.11.00_32/64,
		v=HP:
	2015943931 28796 /opt/OV/httpd/bin/ab
	1446960109 6579 /opt/OV/httpd/bin/apachectl
	2908369870 18554 /opt/OV/httpd/bin/apxs
	3168729259 6428 /opt/OV/httpd/bin/dbmmanage
	2081019407 32884 /opt/OV/httpd/bin/htdigest
	1736902611 24677 /opt/OV/httpd/bin/htpasswd
	3763805908 446464 /opt/OV/httpd/bin/httpd
	3282197105 24658 /opt/OV/httpd/bin/logresolve
	4013327400 24653 /opt/OV/httpd/bin/rotatelogs

Patch Conflicts: None

Patch Dependencies: None

Hardware Dependencies: None

Other Dependencies: None

Supersedes: None

Equivalent Patches:
	PHSS_27935:
	s700: 10.20
	s800: 10.20

	PSOV_03215:
	sparcSOL: 2.5.1 2.6 2.7

Patch Package Size: 650 KBytes

Installation Instructions:
	Please review all instructions and the Hewlett-Packard
	SupportLine User Guide or your Hewlett-Packard support terms
	and conditions for precautions, scope of license,
	restrictions, and, limitation of liability and warranties,
	before installing this patch.
	------------------------------------------------------------
	1. Back up your system before installing a patch.

	2. Login as root.

	3. Copy the patch to the /tmp directory.

	4. Move to the /tmp directory and unshar the patch:

		cd /tmp
		sh PHSS_27936

	5. Run swinstall to install the patch:

		swinstall -x autoreboot=true -x patch_match_target=true \
			  -s /tmp/PHSS_27936.depot

	By default swinstall will archive the original software in 
	/var/adm/sw/save/PHSS_27936.  If you do not wish to retain a
	copy of the original software, include the patch_save_files
	option in the swinstall command above:

		-x patch_save_files=false

	WARNING: If patch_save_files is false when a patch is installed,
		 the patch cannot be deinstalled.  Please be careful
		 when using this feature.

	For future reference, the contents of the PHSS_27936.text file is 
	available in the product readme:

		swlist -l product -a readme -d @ /tmp/PHSS_27936.depot

	To put this patch on a magnetic tape and install from the
	tape drive, use the command:

		dd if=/tmp/PHSS_27936.depot of=/dev/rmt/0m bs=2k

Special Installation Instructions:
	If there are any ovw sessions running on either the
	Management Station or on any Management Consoles, these
	sessions need to be closed.  The "ovstop" command
	should then be executed.

	WARNING: the patch will not install if any
	         Network Node Manager processes are
	         detected.

	NOTE: ovstart is NOT executed after the patch is loaded
	      You will need to manually run ovstart.
	      Also, in order to keep a history of the patches
	      installed on your system the post-install script
	      will attempt to copy this <patch_name>.text file
	      to /usr/OV/ReleaseNotes/patches
	      (or /opt/OV/ReleaseNotes/patches).  Please make
	      sure this file is in /tmp before installation.
	========================================================