Cray Not Affected

Updated:  May 13, 2002

Status

Not Affected

Vendor Statement

Cray, Inc. is not vulnerable since cachefs is not supported under Unicos and Unicos/mk.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

The CERT/CC has no additional comments at this time.

Fujitsu Not Affected

Updated:  May 14, 2002

Status

Not Affected

Vendor Statement

UXP/V is not vulnerable, because it does not have Cachefs and similar functionalities.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

The CERT/CC has no additional comments at this time.

Hewlett Packard Not Affected

Notified:  May 06, 2002 Updated: May 07, 2002

Status

Not Affected

Vendor Statement

HP-UX is not vulnerable because it does not use cachefsd.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

The CERT/CC has no additional comments at this time.

IBM Not Affected

Notified:  May 06, 2002 Updated: May 06, 2002

Status

Not Affected

Vendor Statement

IBM's AIX operating system, all versions, is not vulnerable.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

The CERT/CC has no additional comments at this time.

Nortel Networks Not Affected

Updated:  May 13, 2002

Status

Not Affected

Vendor Statement

Nortel Networks products and solutions using the affected Sun Solaris operating systems do not utilize the NFS/RPC file system cachefs daemon. Nortel Networks recommends following the mitigating practices in Sun Microsystems Inc.'s Alert Notification.; this will not impact these Nortel Networks products and solutions. For more information please contact Nortel at: North America: 1-8004NORTEL or 1-800-466-7835 Europe, Middle East and Africa: 00800 8008 9009, or +44 (0) 870 907 9009 Contacts for other regions are available at www.nortelnetworks.com/help/contact/global/

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

The CERT/CC has no additional comments at this time.

OpenBSD Not Affected

Notified:  May 06, 2002 Updated: May 06, 2002

Status

Not Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

The CERT/CC has no additional comments at this time.

SGI Not Affected

Notified:  May 06, 2002 Updated: May 06, 2002

Status

Not Affected

Vendor Statement

SGI does not ship with SUN cachefsd, so IRIX is not vulnerable.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

The CERT/CC has no additional comments at this time.

Sun Affected

Notified:  May 06, 2002 Updated: May 06, 2002

Status

Affected

Vendor Statement

See, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

The CERT/CC has no additional comments at this time.