===========================================================================
SCO Security Bulletin 99.23
21st-December-1999
UnixWare 7 Security Patch
---------------------------------------------------------------------------

I.   Description

	Security holes have been found in a number of utilities available 
	on UnixWare 7 systems. 

II.  Impact

	Without these patches, unauthorized users may gain privileges.

III. Releases

	These SSEs contains binaries for: 

	UnixWare 7.0.0  (SSE043)
	UnixWare 7.0.1	(SSE044)
	UnixWare 7.1.0	(SSE045)

IV.  Solution

SCO is providing an interim patch to address this issue in the form of a
System Security Enhancement (SSE) package.


SSE043 contains replacement binaries for UnixWare 7.0.0, and is
available for Internet download via anonymous ftp.

You can download the SSE package as follows:

Anonymous ftp (World Wide Web URL):

    ftp://ftp.sco.COM/SSE/sse043-044-045.ltr    (cover letter, ASCII text)
    ftp://ftp.sco.COM/SSE/sse043.tar  (new binaries)


SSE044 contains replacement binaries for UnixWare 7.0.1, and is
available for Internet download via anonymous ftp.

You can download the SSE package as follows:

Anonymous ftp (World Wide Web URL):

    ftp://ftp.sco.COM/SSE/sse043-044-045.ltr    (cover letter, ASCII text)
    ftp://ftp.sco.COM/SSE/sse044.tar  (new binaries)


SSE045 contains replacement binaries for UnixWare 7.1.0, and is
available for Internet download via anonymous ftp.

You can download the SSE package as follows:

Anonymous ftp (World Wide Web URL):

    ftp://ftp.sco.COM/SSE/sse043-044-045.ltr    (cover letter, ASCII text)
    ftp://ftp.sco.COM/SSE/sse045.tar  (new binaries)

Checksums (sum -r):

	02033     4 sse043-044-045.ltr
	61191   740 sse043.tar
	03209   860 sse044.tar
	61168   760 sse045.tar

V.   Updates

This bulletin is available for anonymous ftp download from 
ftp://ftp.sco.COM/SSE/security_bulletins/SB.99-23a, and will be
updated as new information becomes available.

The latest information on security vulnerabilities and fixes from
SCO is available on the world-wide web at http://www.sco.com/security/

VI.  Further Information:

If you have further questions, contact your support provider.  If you
need to contact SCO, please send electronic mail to support@sco.COM, or
contact SCO as follows. 

    USA/Canada: 6am-5pm Pacific Time (PST/PDT)
    -----------
    1-800-347-4381  (voice)
    1-408-427-5443  (fax)

    Pacific Rim, Asia, and Latin American customers: 6am-5pm Pacific
    ------------------------------------------------ Time (PST/PDT)
    1-408-425-4726  (voice)
    1-408-427-5443  (fax)

    Europe, Middle East, Africa: 9am-5:30pm UK Time (GMT/BST)
    ----------------------------
    +44 (0)1923 816344 (voice)
    +44 (0)1923 817781 (fax)