Apply patches and reboot. Hewlett-Packard recommends that the patches be applied as soon as possible. The information in the following Security Bulletin should be acted upon as soon as possible. Hewlett-Packard Company will not be liable for any consequences to any customer resulting from customer's failure to fully implement instructions in this Security Bulletin as soon as possible. Remote and local users can compromise root access.
All patches are available now.
I. A. Background rpc.pcnfsd is a remote procedure call used by NFS clients which is a service providing username and password authentication for system which have NFS client software installed. If exploited, this defect allows the main printer spool directory used by rpc.pcnfsd to be made world writeable. B. Fixing the problem This involves installing a series of patches which require rebooting the system. The main patch requires a libc patch, which in turn requires a kernal patch. The following sets of patches will need to be installed to resolve all the documented patch dependencies.