Apply patches and reboot. Hewlett-Packard recommends that the patches be applied as soon as possible. The information in the following Security Bulletin should be acted upon as soon as possible. Hewlett-Packard Company will not be liable for any consequences to any customer resulting from customer's failure to fully implement instructions in this Security Bulletin as soon as possible. Remote and local users can compromise root access.
All patches are available now.
If exploited, this defect allows the main printer spool directory used by rpc.pcnfsd to be made world writeable. B. Fixing the problem This involves installing a series of patches which require rebooting the system. The main patch requires a libc patch, which in turn requires a kernal patch. The following sets of patches will need to be installed to resolve all the documented patch dependencies. This problem is fixed fully in HP-UX release 11.01.