ArcInfo Workstation 9.0 Security Patch on UNIX

save bookmark view bookmarks article feedback

Date Submitted: April 26, 2005
Last Modified: June 9, 2006

Summary:

This Patch addresses possible security vulnerabilities in the ArcStorm and Geoprocessing Server features of ArcInfo Workstation 9.0 on UNIX.

Description:

• Introduction
• Issues Addressed with this Patch
• Files Installed in this Patch
  
• Installing this Patch
  
• How to identify which Patch is installed
• Patch Updates
Updated Tar Files as of June 9, 2006
• Getting Help

Introduction

ESRI® announces the ArcInfo Workstation 9.0 Security Patch on UNIX. This Patch addresses possible security vulnerabilities in the ArcStorm and Geoprocessing Server features of ArcInfo Workstation 9.0 on UNIX. It deals specifically with the issues listed below under Issues Addressed with this Patch.

We recommend that all ArcInfo Workstation 9.0 on UNIX customers, who use ArcStorm or the Geoprocessing Server feature, download and install this Patch at their earliest convenience to ensure the highest quality experience when working with ArcInfo Workstation 9.0. ArcInfo users who do not use ArcStorm or the Geoprocessing Server do not need to apply this patch. For those users, however, we strongly recommend that the ownership of the files in $ARCHOME/bin be reviewed and any root-owned executables be switched back to the ownership of the normal ArcInfo install account. If ArcStorm and the Geoprocessing Server are not in use, there should be no root-owned executables in the $ARCHOME/bin directory.

Issues Addressed with this Patch

CQ00291050 - Possible vulnerabilities found in ArcInfo Workstation binaries when using ArcStorm or the Geoprocessing Server features.

Files Installed in this Patch

• Under the ArcInfo Workstation 9.0 installation bin directory:
  
  

  abservice
  asbuild
  asmaster
  asrecovery
  asuser
  asutility
  lockmgr
  se
  wservice
  
  

Installing this Patch

This Patch is intended for ArcInfo users who run ArcStorm or the Geoprocessing Server feature. The installation of those features require that selected ArcInfo executables be assigned root ownership. This Patch provides new versions of those root-owned files.

ArcInfo Workstation 9.0 must be installed before you can install this Patch. During installation, you can either save the original 9.0 files or overwrite them. If you choose to save them, make sure you have enough disk space. The disk space requirements, for each platform, are displayed during the installation process.

1. Make sure you have write access to the ArcInfo Workstation installation location, and that no one is using ArcInfo.



2. Download the appropriate tar file to a location other than ArcInfoWorkstation installation location:

File Updated Tar Files as of June 9, 2006	Size
HP ai90-sec-patch-hp.tar	35 MB
IBM ai90-sec-patch-ibm.tar	14 MB
SGI ai90-sec-patch-sgi.tar	21 MB
Solaris ai90-sec-patch-solaris.tar	18 MB
Tru64 ai90-sec-patch-tru64.tar	31 MB



3. Extract the specified tar file by typing:




% tar -xvf ai90-sec-patch-<Platform>.tar

4. Start the installation by typing:




% ./applypatch

This will start the dialog for the menu-driven installation procedure. Default selections are noted in parentheses ( ). To quit the installation procedure, type 'q' at any time.

5. Under the $ARCHOME/bin directory, become ROOT and change the ownership and permissions of the following ArcStorm executables:




#chown root abservice asbuild asmaster asrecovery asuser asutility lockmgr se wservice
#chmod 6755 abservice asbuild asmaster asrecovery asuser asutility lockmgr se wservice

6. (Optional - Perform this step only if you chose to back up the original files when applying the patch.)
   
   Under the $ARCHOME/bin directory, become ROOT and change the ownership and permissions of the following files:




#chown <your_user_account_name> abservice.orig asbuild.orig asmaster.orig asrecovery.orig asuser.orig asutility.orig lockmgr.orig se.orig wservice.orig

#chmod 444 abservice.orig asbuild.orig asmaster.orig asrecovery.orig asuser.orig asutility.orig lockmgr.orig se.orig wservice.orig

How to identify which Patch is installed

Any modified UNIX executables (or libraries) being sent out as part of a Patch will return the unique identification number for that fix when checked with the "what" command for UNIX and the "strings" command for Linux. For example, to display the identification string for this Patch, type:

%what se | grep QFE

QFE-WS-90-CQ00291050

Patch Updates

Check the Online Support Center periodically for the availability of additional Patches. New information about this Patch will be posted here.

UPDATE 06/09/2006 - Updated Tar Files to address two additional security vulnerabilities.

Getting Help

Domestic sites, please contact ESRI Technical Support at 909.793.3774, if you have any difficulty installing this Patch. International sites, please contact your local ESRI software distributor.