<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">OBSOLETE Patch-ID# 114858-03
Keywords: security sshd sftp-server audit session logout
Synopsis: Obsoleted by: 114858-04 SunOS 5.9_x86: usr/lib/ssh/sshd Patch
Date: Oct/08/2003


Install Requirements: Install in Single User Mode                      
                      Reconfigure immediately after patch is installed                      
                      
Solaris Release: 9_x86

SunOS Release: 5.9_x86

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 114858

Topic: SunOS 5.9_x86: usr/lib/ssh/sshd Patch

Relevant Architectures: i386

BugId's fixed with this patch: 4801044 4860120 4923312

Changes incorporated in this version: 4923312

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/lib/ssh/sftp-server
/usr/lib/ssh/sshd

Problem Description:

4923312 Possible root exploit in ssh
 
(from 114858-02)
 
4860120 ssh echos back "Kerberos authentication failed:  password incorrect"
 
(from 114858-01)
 
4801044 sshd writes incorrect audit session ID for logout events

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
----------------------------- 
 
none

README -- Last modified date:  Wednesday, March 17, 2004

</pre></body></html>