COMMAND

    fsirand(8)

SYSTEMS AFFECTED

    SunOS 4.1.1

PROBLEM

    A security vulnerability exists in  SunOS NFS relating to the  way
    in   which   it   allocates   file   handles.    The  patch  file,
    100424-01.tar.Z,  contains  a  fix  for  SunOS version 4.1.1.  The
    BugID fixed in this patch is 1063470.

    The fsirand  program could  allow a  remote system  user to  guess
    NFS file handles, thereby  potentially allowing them to  mount and
    access your NFS file systems.

SOLUTION

    Obtain  the  patch  from  Sun  or  from  ftp.uu.net  and  install,
    following the  provided instructions.   You must  install  PatchID
    100173-07 before installing this patch.