To aid in the wide distribution of essential security information, the CERT Coordination Center is forwarding the following information from Hewlett-Packard. Hewlett-Packard urges you to act on this information as soon as possible. Hewlett-Packard recommends that the information in the following Security Bulletin should be acted upon as soon as possible. Packard will not be liable for any consequences to any customer resulting from customer's failure to fully implement instructions in this Security Bulletin as soon as possible. A vulnerability in Remote Watch exists allowing users to potentially gain increased privileges.
All patches are available now.
It has been found that HP-UX systems with Remote Watch installed have this vulnerability. The vulnerability allows users to potentially gain increased privileges. If these patches are installed, then the vulnerability cannot be exploited. The vulnerability can be eliminated from releases 8.X and 9.X of HP-UX by applying a patch. The users guide explains the process for downloading HP-UX patches via email and other services available.