-----BEGIN PGP SIGNED MESSAGE-----

===========================================================================
              AUSCERT External Security Bulletin Redistribution

                  ESB-1999.065 -- Compaq Advisory SSRT0600U
                Potential Security Vulnerability in "dtlogin"
                                25 May 1999

===========================================================================

Compaq Computer Corporation has released the following advisory
concerning a potential security vulnerability with "dtlogin" in
Tru64/DIGITAL UNIX. This vulnerability may allow users to gain
superuser access.

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----

Subject: SSRT0600U Tru64/DIGITAL UNIX (dtlogin) Security Advisory
Importance: High

                 	* No Restrictions For Distribution *
________________________________________________________
UPDATE:                                     May 11,  1999

  TITLE: Tru64/DIGITAL UNIX V4.0b, V4.0d, V4.0e and V4.0f
         - Potential Security Vulnerability
	ref#: SSRT0600U "dtlogin" 
          
  SOURCE: Compaq Computer Corporation
          Software Security Response Team 

 "Compaq is broadly distributing this Security Advisory in order
 to bring to the attention of users of Compaq products the
 important security information contained in this Advisory. 
 Compaq recommends that all users determine the applicability of
 this information to their individual situations and take
 appropriate action.

 Compaq does not warrant that this information is necessarily
 accurate or complete for all user situations and, consequently,
 Compaq will not be responsible for any damages resulting from
 user's use or disregard of the information provided in this
 Advisory."

- - ----------------------------------------------------------------------
IMPACT:
                                                                       
  Compaq has discovered a potential vulnerability with the 
  /usr/dt/bin/dtlogin in Compaq's Tru64/DIGITAL UNIX software, 
  where under certain circumstances, a user may gain unauthorized 
  access as superuser.

- - ----------------------------------------------------------------------
RESOLUTION:

 This potential security problem has been resolved and a
 patch for this problem has been made available for 
 Tru64/DIGITAL UNIX V4.0B, V4.0D, V4.0E and V4.0F. 
 
 Systems with enhanced security enabled and one or more of 
 the products listed below, should install this patch immediately.
           - Distributed Computing Environment (DCE) from Compaq
           - Advanced Server for Digital UNIX (ASDU) from Compaq
           - AFS Enterprise File Systems from Transarc
           - Kerberos 4 Network Authentication Protocol from MIT


 If you need this patch for V4.0, V4.0A or V4.0C, please contact
 your normal Compaq Services support channel. 
	
 *This solution will be included in a future distributed release of 
  Compaq's Tru64/DIGITAL UNIX. 

  This patch may be obtained from the World Wide Web at the
  following FTP address:

	      http://www.service.digital.com/patches

	
	Use the FTP access option, select DIGITAL_UNIX directory,
	then choose the appropriate version directory and
	download the patch accordingly. 

  Note: [1]  The appropriate patch kit must be installed
  	following any upgrade to V4.0b, V4.0d, V4.0e or V4.0f.
        
	[1a] These patches may be used on any patch kit/base level. 

        [2]   IMPORTANT - Please review all README and 
      	release notes which are related to this patch or an
	official patch kit, prior to installation of this patch.
 
 Additional Considerations:

   This patch updates the following component:
    
		/usr/dt/bin/dtlogin

   If you believe you have, or aren't sure if you have, previously
   installed a patch to this module you should contact your
   normal Compaq Service channel.
	
   Also, if you need further information, please contact your normal 
   Compaq Services support channel.

   Compaq appreciates your cooperation and patience. We regret any
   inconvenience applying this information may cause.

   As always, Compaq urges you to periodically review your system
   management and security procedures. 

   Compaq will continue to review and enhance the security
   features of its products and work with customers to maintain and
   improve the security and integrity of their systems.
________________________________________________________  
  Copyright (c) Compaq Computer Corporation, 1999 All
  Rights Reserved.
  Unpublished Rights Reserved under the Copyright Laws Of
  The United States.
________________________________________________________

- -----BEGIN PGP SIGNATURE-----
Version: 2.7.1

iQCVAwUBN0FpfAPNirVrNAlNAQFMrAQAo2ZnaMiBeNYM3FEc2AA6pJz4QF7Qir1O
GZII+LzAkH0wRYb4tt50DuDc4goL/rVLj3T02xE90O1aIjy4QuLvQgmNhF9z88Je
T/hhlK6cs4oZPIch2XueWRoRH3bmMiABG3Fu3L57oVepv4a1N0YroT+p6i7lp1Dp
AfZcPGkljB8=
=Qvor
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content.  The decision to use any or all of this information is
the responsibility of each user or organisation, and should be done so in
accordance with site policies and procedures.

NOTE: This is only the original release of the security bulletin.  It will
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the original authors to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

	http://www.auscert.org.au/Information/advisories.html

If you believe that your system has been compromised, contact AusCERT or
your representative in FIRST (Forum of Incident Response and Security
Teams).

Internet Email: auscert@auscert.org.au
Facsimile:	(07) 3365 7031
Telephone:	(07) 3365 4417 (International: +61 7 3365 4417)
		AusCERT personnel answer during Queensland business hours
		which are GMT+10:00 (AEST).
		On call after hours for emergencies.

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv
Comment: ftp://ftp.auscert.org.au/pub/auscert/AUSCERT_PGP.key

iQCVAwUBN25h1Ch9+71yA2DNAQH5WgP/fsGmNiPFIMj5ecfvfdaKRpUVgKJyaYia
/Rit07AZHGhl3dlvK90MK3GvXfMT+PKDle+JCKnOoDci9E+Sha7rkzM0a8IbgTMg
83KJpSmeQtn3nW6r5J746elzS5BkLdNIub0qQYLq/wAIUOBo/Va7VYgpe+UnApw7
EWdo7wpdEWo=
=CC4D
-----END PGP SIGNATURE-----