The information in the following Security Bulletin should be acted upon as soon as possible. Hewlett Packard will not be liable for any consequences to any customer resulting from customer's failure to fully implement instructions in this Security Bulletin as soon as possible. Using Vue 3.0 on only HP-UX releases 10.01 and 10.10 it is possible to increase privileges and launch denial of service attacks. Increased privilege and denial of service.
All patches are available now.
The above patches for the fileset X11.VUE-RUN were created to eliminate the problem with VUE3.0. This vulnerability can be eliminated by installing the patches referenced herein. The patches provide a new version of the necessary executables to fix the vulnerability. Installation instructions are contained within the patches. Any other use of this information is prohibited.