This vulnerability may allow regular and anonymous ftp users to access files with root privileges. Hewlett Packard will not be liable for any consequences to any customer resulting from customer's failure to fully implement instructions in this Security Advisory as soon as possible.
All patches are available now.
A vulnerability in the ftpd and kftpd executable has been discovered. The vulnerability can be eliminated from HP-UX releases 9.X and 10.X by applying the appropriate patch. C. Recommended solution 1. Determine which patch is appropriate for your operating system. The users guide explains the HP-UX patch downloading process via email and other services available.