Information for Digital Ultrix
As well as the CERT advisory, this came in the post from DEC. DEC don't support versions of Ultrix prior to 4.3, so I guess you'll just have to move with the times and upgrade if you want to ping-proof your systems.
Mike,
You presently have ULTRIX listed as a safe operating system. Digital has
discovered that this isn't strictly true; ULTRIX can in fact be crashed by
a variant of the ping attack under certain circumstances. To be safe,
Digital has prepared patches for versions 4.3 through 4.5 of ULTRIX. These
can be found on atlanta.service.digital.com as follows:
MIPS processors (DECstations):
v4.3 - /pub/mandatory_upgrades/MIPS/ULTRIX/v4.3/v43_ping_fix.tar.Z
v4.3a - /pub/mandatory_upgrades/MIPS/ULTRIX/v4.3a/v43a_ping_fix.tar.Z
v4.4 - /pub/mandatory_upgrades/MIPS/ULTRIX/v4.4/v44_ping_fix.tar.Z
v4.5 - /pub/mandatory_upgrades/MIPS/ULTRIX/v4.5/v45_ping_fix.tar.Z
VAX processors:
v4.3 - /pub/mandatory_upgrades/VAX/ULTRIX/v4.3/v43_ping_fix.tar.Z
v4.4 - /pub/mandatory_upgrades/VAX/ULTRIX/v4.4/v44_ping_fix.tar.Z
v4.5 - /pub/mandatory_upgrades/VAX/ULTRIX/v4.5/v45_ping_fix.tar.Z
(Note: ULTRIX v4.3a is not supported on the VAX.)
Thanks,
Martin Moore
--