A patch was issued on 07-Aug-2003 that fixed the vulnerability, but later a security issue was found with Entegrity DCE and DFS versions
4.2 and 4.3 ONLY.

A second patch has been issued which supercedes the prior security-related patch ONLY for DCE and DFS versions 4.2 and 4.3. (NOTE: If you are running other versions of Entegrity DCE or DFS for Tru64, use the earlier patch instead.)

This patch kit fixes a security issue that causes dced on Tru64 4.2 and 4.3 DCE releases to stop functioning. Symptoms include daemon crashing and hung DCE processes.

Obtaining the Patch

To obtain the patch, click here.

Applying the Patch

For Tru64 systems running Entegrity DCE and DFS versions 4.2 and 4.3:

1. Uncompress and untar the patch kit.

2. Follow the instructions below for DCE and, if DFS is installed, for DFS.

For DCE installations:

1. Stop all DCE applications:

dcesetup stop

2. Issue the following commands:

(The following mv command should be issued all on one line. It is broken into two lines here for layout purposes.)

mv /opt/dcelocal/shlib/libdce.so /opt/dcelocal/
shlib/libdce.so.430KIT

cp libdce.so /opt/dcelocal/shlib/libdce.so

chmod 644 /opt/dcelocal/shlib/libdce.so

chown root:system

/opt/dcelocal/shlib/libdce.so

dcesetup clean

dcesetup start

3. Restart DCE applications.

For DFS installations:

1. Issue the following commands:

(The following mv command should be issued all on one line. It is broken into two lines here for layout purposes.)

mv /sys/BINARY/dcedfs.mod /sys/BINARY/
dcedfs.mod.430KIT

cp dcedfs.mod /sys/BINARY/dcedfs.mod

2. Rebuild the kernel with DFS included

3. Copy the new kernel to /vmunix

4. Reboot the machine