CA-94:05.README
Issue date: March 18, 1994
Date of last revision: September 18, 1995

This file is a supplement to CERT Advisory CA-94:05, "MD5 Checksums,"
distributed on March 18, 1994. We update the file as additional
information becomes available.

/////////////////////////
Added September 18, 1995

Note: After we publish checksums in advisories and READMEs, files are
sometimes updated at individual locations because of system upgrades or patch
installation. For current MD5 checksum values, we recommend that you check
with your vendor.

Since this advisory was distributed, other vendors have begun to
provide MD5 checksums for a number of their binaries (executables).
Information about Hewlett-Packard and Solbourne (Grumman Systems
Support) checksums has been added to the original text.

----------------------
Hewlett-Packard

To obtain a copy of the HP SupportLine mail service user's guide, send the
following (in the TEXT PORTION OF THE MESSAGE to) to the HP SupportLine mail
service.

     To: support@support.mayfield.hp.com

     Message Text:

      send guide.txt

To obtain a patch identified within this Security Bulletin, send the following
(in the TEXT PORTION OF THE MESSAGE) to the HP SupportLine mail service.

    To: support@support.mayfield.hp.com

    Message Text:

     send xxxxxxxxxxxx

    (where xxxxxxxxxxxx represents the specified patch name).

If you have concerns about security issues, please forward them to:

                   security-alert@hp.com

The security-alert node is monitored during working hours Pacific Daylight Time
by multiple HP Security Response Team personnel. We reply to your message only
if necessary to obtain additional information.


----------------------
Solbourne (Grumman Systems Support)

A list of MD5 checksums for Solbourne (Grumman Systems Support)
executables under 4.1C is available via anonymous ftp from
ftp.nts.gssc.com in directory /pub/docs/, files usr.etc.md5 and
bin.md5. These include the files referred to in the advisory.

The MD5 checksums for these executables are included below:

     MD5 (bin.md5) = cf3b3d8447ae19fa7e1741939fe82ea9
     MD5 (bin.md5.41b) = 7e0c1ae26eda72f1791e235ab244ae44
     MD5 (usr.etc.md5) = 1727d1705cc7750b7848df60a4b5788e
     MD5 (usr.etc.md5.41b) = 7e02c01cc47ec469c3210a8fabb012ff

/////////////////////////

1) The line

md5:SunOS:4.1.3_u1:Original Dist:sun4:/usr/bin/login:4e437a85e05f886ff5082ac58108d882

should have said "/bin/login" instead of "/usr/bin/login":

md5:SunOS:4.1.3_u1:Original Dist:sun4:/bin/login:4e437a85e05f886ff5082ac58108d882


2) The anonymous FTP site for the "tripwire" package is
   "ftp.cs.purdue.edu" instead of "ftp.cs.purdue".

