Vulnerability makes it possible for an external user to cause a system reboot. Due to the critical nature of this defect, HP is introducing this as a non-cumulative patch. As a result, in cases where a dependency exists, the current ARPA Transport cumulative patch will need to be installed first. The two can be installed in the same session to minimize system downtime, but the prerequisite patch must be loaded first. Installation will fail if this is not the case.
All patches are available now.
The vulnerability can be eliminated from HP-UX releases 9.X and 10.X by applying either one or two patches. The users guide explains the HP-UX patch downloading process via email and other services available. In cases where a dependency exists, the current ARPA Transport cumulative patch will need to be installed first. The two can be installed in the same session to minimize system downtime, but the prerequisite patch must be loaded first. Installation will fail if this is not the case.