Dear SCO Customer,

Support Level Supplement (SLS) ptf7218a, the UnixWare 7.0.0 and 7.0.1
FTP Service Supplement, addresses the following problems:

1.  The FTP daemon, /usr/sbin/ftpd (based on WU-FTPD), has a security
    vulnerability that can allow unprivileged users to obtain root
    access through use of the "site exec" command. This vulnerability
    is described in CERT advisory CA-2000-13 (see http://www.cert.org).

2.  An associated segmentation violation in /usr/bin/ftp occurred.


Contents
--------

        /usr/bin/ftp
        /usr/sbin/in.ftpd


Software Notes and Recommendations
----------------------------------

SLS ptf7218a should only be installed on:

        UnixWare 7 Release 7.0.0 or 7.0.1

If your system is running any libraries or commands that are
contained in this SLS, then these programs will continue to run
with the old versions of these libraries or commands until the
the system is rebooted.

Note that when all necessary patches have been installed, it is
recommended that you reboot the system at the earliest opportunity.
This will ensure that no programs continue to run with the old
libraries or commands.


Installation Instructions
-------------------------

1. Download the ptf7218a.Z file to the /tmp directory on your machine.

2. As root, uncompress the file and add the SLS package to your system
   using these commands:

        $ su
        Password: <type your root password>
        # uncompress /tmp/ptf7218a.Z
        # pkgadd -d /tmp/ptf7218a
        # rm /tmp/ptf7218a

Alternatively, this SLS package may be installed in quiet mode,
that is, without displaying the release notes and asking for
installation confirmation.  To do this, use these commands:

        $ su
        Password: <type your root password>
        # uncompress /tmp/ptf7218a.Z
        # pkgadd -qd /tmp/ptf7218a all
        # rm /tmp/ptf7218a

3. There is no need to reboot the system after installing this SLS package.

The release notes displayed prior to installation can be found in:

        /var/sadm/pkg/ptf7218a/install/ptf7218a.txt


Removal Instructions
--------------------

1. As root, remove the SLS package using these commands:

        $ su
        Password: <type your root password>
        # pkgrm ptf7218a

2. There is no need to reboot the system after removing this SLS package.


If you have questions regarding this SLS, or the product on which 
it is installed, please contact your software supplier.