I just called local Sun support. They don't know anything about this hole and they don't accept the 8lgm advisory as problem report as we cannot prove that the bug exists on *our* SunOS host. Outch! I cannot believe that nobody else has opened a service call or bug fix request (or whatever Sun calls this) at Sun Microsystems. They referred me to patch 100909-03 which fixed a hole in syslogd for SunOS 4.1.3... My questions are: - Is there an official patch from Sun and what's the patch-ID? - Has anybody talked to Sun about this problem? - Is Sun working on a patch? -- Goetz von Escher email: Goetz.von-Escher@Open.CH Open Systems AG voice: +41 (61) 262-0505 Petersplatz 12 FAX: +41 (61) 262-0510 CH-4051 Basel, Switzerland