HP is not liable for any misuse of this information by any third party. The information in the following Security Bulletin should be acted upon as soon as possible. Hewlett Packard will not be liable for any consequences to any customer resulting from customer's failure to fully implement instructions in this Security Bulletin as soon as possible. Vulnerabilities exist in syslogd, and also in servers that listen on well-known TCP or UDP ports. The syslogd vulnerability could result in a potential denial of service or console spoofing.
All patches are are available now.
Packard will not be liable for any consequences to any customer resulting from customer's failure to fully implement instructions in this Security Bulletin as soon as possible. The syslogd program can be used by a process to forward syslog messages that can result in a denial of service or a spoofing problem on the system console. There are well-known ports that the xdm, dtlogin and X servers listen on. External programs can connect to these ports and could gain unauthorized access to services using potential bugs in these servers. At this time there are no such known vulnerabilities in these servers.