Patch-ID# 107339-04
Keywords: security kcms -p printer
Synopsis: SunOS 5.7_x86: kcms_server and kcms_configure security fixes
Date: Feb/17/2005


Install Requirements: Reboot after installation                      
                      
Solaris Release: 7_x86

SunOS Release: 5.7_x86

Unbundled Product: 

Unbundled Release: 

Xref: 

Topic: SunOS 5.7_x86: kcms_server and kcms_configure security fixes

Relevant Architectures: i386

BugId's fixed with this patch: 4199722 4415570 4774256 5040882

Changes incorporated in this version: 5040882

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

        /usr/openwin/bin/kcms_calibrate
        /usr/openwin/bin/kcms_server
        /usr/openwin/bin/xcms2kcms
        /usr/openwin/bin/xcmsdb
        /usr/openwin/demo/kcms/README
        /usr/openwin/demo/kcms/Resource
        /usr/openwin/demo/kcms/kcms_photocd
        /usr/openwin/demo/kcms/kcmstest_tiff
        /usr/openwin/demo/kcms/pcdviewer
        /usr/openwin/demo/kcms/print_attributes
        /usr/openwin/demo/kcms/print_header
        /usr/openwin/demo/kcms/print_montbls
        /usr/openwin/demo/kcms/profile_demo
        /usr/openwin/demo/kcms/runpcdviewer
        /usr/openwin/lib/libkcs.so.1
        /usr/openwin/share/etc/OWconfig_entries
        /usr/openwin/share/etc/devhandlers/kcmscSUNWcolorsense.so.1
        /usr/openwin/share/etc/devhandlers/kcmscSUNWgamma.so.1
        /usr/openwin/share/etc/devhandlers/kcmscSUNWxrite_dtp92.so.1
        /usr/openwin/share/etc/devhandlers/kcsEKPfmticc30.so.2
        /usr/openwin/share/etc/devhandlers/kcsEKProfkcms.so.2
        /usr/openwin/share/etc/devhandlers/kcsEKXfrmucp.so.2
        /usr/openwin/share/etc/devhandlers/kcsSUNWIOsolf.so.2
        /usr/openwin/share/etc/devhandlers/kcsSUNWIOxwin.so.2
        /usr/openwin/share/etc/devhandlers/kcsSUNWStatsolm.so.2
        /usr/openwin/share/etc/gpiutils/libkcms_sys.so.2
        /usr/openwin/share/etc/gpiutils/libkpcp.so.2
        /usr/openwin/share/etc/gpiutils/libstdprof.so.2
        /usr/openwin/share/etc/gpiutils/libtu_runtime.so.1
/usr/openwin/bin/kcms_configure

Problem Description:

5040882 Security issue within kcms_configure allows for file corruption
 
(from 107339-03)
4774256 Security issue with kcms_server daemon
 
(from 107339-02)
4415570 kcms_configure can cause buffer overflow and security problem
 
(from 107339-01)
4199722 KCMS configure has security problem

Patch Installation Instructions:
-------------------------------- 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7 release, refer to the man pages for instructions on
using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
----------------------------- 
 
None.

README -- Last modified date:  Thursday, February 17, 2005

