Below is information we have received from vendors concerning the vulnerability described in this advisory. If you do not see your vendor's name, please contact the vendor directly for information. Be sure to install only the appropriate patch. Rdist is available as contributed software which is not supported by Data General. This problem will be fixed in the next release of the contributed software package.
Patches are in process.
Fixes are in process but are not yet available. The APAR numbers for the fixes are given below. To remove the setuid bit, follow these instructions. IBM and AIX are registered trademarks of International Business Machines Corporation. If you have changed your rdist to run setuid you are probably vulnerable.