This bulletin announces HPUX patches for security vulnerabilities discovered in the chsh and chfn utilities. System administrators for HPUX systems are urged to get and install these patches immediately. The information in the following Security Bulletin should be acted upon as soon as possible. Hewlett Packard will not be liable for any consequences to any customer resulting from customer's failure to fully implement instructions in this Security Bulletin as soon as possible.
Vulnerabilities exists allowing local users to gain root privileges.
All patches are available now. The vulnerability can be eliminated from HP-UX releases 9.X and 10.X by applying the appropriate patch. C. Recommended solution 1. Determine which patch are appropriate for your operating system. The users guide explains the HP-UX patch downloading process via email and other services available.