It been a while since I've done Unix Sys Adm. (about 1 year), but I tend to remember that Sun first came out with a patch, that later began a load option. The purpose of this patch/load was a shell script that looked like it had been generated by a COPS run. Run the script and ownership, setuid, and file permissions throughout the /, /usr, and /var file systems.