<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">Patch-ID# 103717-04
Keywords:security sdtcm calendar overwrite rpc.cmsd year 2000 y2000 
Synopsis: CDE 1.0.2_x86: dtcm sdtcm_convert rpc.cmsd patch
Date: Oct/20/97

Solaris Release: 2.4_x86 2.5_x86 2.5.1_x86

SunOS Release: 5.4_x86 5.5_x86 5.5.1_x86

Unbundled Product: CDE

Unbundled Release: 1.0.2

Xref: This patch available on CDE 1.0.1 as patch 103718

Relevant Architectures: i386

BugId's fixed with this patch: 1250240 1264172 1264389 4056822 4056819 4072526

Changes incorporated in this version: 4056822 4056819 4072526

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch:

	/usr/dt/bin/sdtcm_convert
	/usr/dt/bin/rpc.cmsd
	/usr/dt/bin/dtcm

Problem Description: 
 

  4056822 Find 'To' date validation non y2000 compliant.      
  4056819 Cde1.0.2 Recurring yearly appointment is permitted
          on 29/2 (Leap Year).
  4072526 Cde1.0.2 dtcm post year 2000 "View"-&gt;"go to date"
          fails if year is defaulted to an incorrect date.

  Incorporated from previous version

  1264389 rpc.cmsd security problem.
  1264172 CDE 1.0.1 and 1.0.2 sdtcm_convert security
          vulnerability.
  1250240 sdtcm_convert can be used to overwrite files.

Patch Installation Instructions:
-------------------------------- 
Refer to the Install.info file for instructions on using the
generic 'installpatch' and 'backoutpatch' scripts provided with
each patch.  Any other special or non-generic installation
instructions should be described below as special instructions.

Special Install Instructions: 
----------------------------- 

None.
</pre></body></html>