* * * READ ME * * *
               * * * Veritas Operations Manager 5.0 * * *
                    * * * Hot Fix 050001960-27 * * *
                         Patch Date: 2013-04-09


This document provides the following information:

   * PATCH NAME
   * PACKAGES AFFECTED BY THE PATCH
   * BASE PRODUCT VERSIONS FOR THE PATCH
   * OPERATING SYSTEMS SUPPORTED BY THE PATCH
   * INCIDENTS FIXED BY THE PATCH
   * INSTALLATION PRE-REQUISITES
   * INSTALLING THE PATCH
   * REMOVING THE PATCH


PATCH NAME
----------
Veritas Operations Manager 5.0 Hot Fix 050001960-27

PACKAGES AFFECTED BY THE PATCH
------------------------------
VRTSsfmh

BASE PRODUCT VERSIONS FOR THE PATCH
-----------------------------------
* Veritas Operations Manager 5.0

OPERATING SYSTEMS SUPPORTED BY THE PATCH
----------------------------------------

RHEL5 i686
RHEL5 x86-64
RHEL6 x86-64
SLES9 i586
SLES9 x86-64
SLES10 i586
SLES10 x86-64
SLES11 x86-64
HP-UX 11.11
HP-UX 11i v2 (11.23)
HP-UX 11i v3 (11.31)
Solaris 8 SPARC
Solaris 9 SPARC
Solaris 10 SPARC
Solaris 11 SPARC
Solaris 10 X64
Solaris 10 X86
Solaris 11 X64
Solaris 11 X86
Windows 2003 32-bit
Windows 2003 X64
Windows 2008 32-bit
Windows 2008 X64
Windows Server 2008 R2 X64
AIX 5.2 ppc
AIX 5.3 ppc
AIX 6.1 ppc
AIX 7.1 ppc


INCIDENTS FIXED BY THE PATCH
----------------------------
This patch fixes the following Symantec incidents:
1) Etrack 3093373 Plug a security loop hole in xprtld 
2) Etrack 3142977 High cpu usage by xprtld process when VOM Server is not available

Patch ID: HF050001960-27

*  3093373   (Tracking ID: 3093370 )
Symptom:
There is a way to exploit xprtld that allows one to send a file to any VOM MH and execute it without proper access permission.

Description:
There is a way to exploit xprtld that allows one to send a file to any VOM MH and execute it without proper access permission.

Resolution:
Check correctly for user roles for user commands in xprtld.


* 3142977  (Tracking ID: 3032850)
Symptom:
High cpu usage by xprtld process on MH when VOM Server is not available.

Description:
When a VOM MH is cross connected to 2 different VOM Servers, and one of
Servers is unavailable, the xprtld on the MH shows high CPU usage.

Resolution:
Return error if socket not available, retry again later.


INSTALLING THE PATCH
--------------------
This hotfix is applicable for VOM managed hosts. 
1. Download the file HF050001960-27.
2. Launch a browser and login to the VOM management server. 
3. Navigate to Settings - Deployment Management tab. 
4. Upload the hotfix to the VOM CMS using the upload button. The HF050001960-27 should be visible in the table below. 
5. Select the HF and install it


REMOVING THE PATCH
------------------
1. Launch a browser and login to the VOM management server. 
2. Navigate to Settings - Deployment Management tab. 
3. Select the hotfix. This will take you to the page which shows the status of the HF on all hosts. 
4. Uninstall it from the managed host.


SPECIAL INSTRUCTIONS
--------------------
NONE