Hewlett-Packard Company Information for VU#377804

HP-UX         - potentially vulnerable (details below)
HP-MPE/ix     - under investigation
HP Tru64 UNIX - potentially vulnerable.  Please refer to the
Entegrity Solutions Corp. vendor statement in this
vulnerability note for details.
HP OpenVMS    - potentially vulnerable. Please contact HP Services
for information.
HP NonStop Servers - under investigation

To report potential security vulnerabilities in HP software,
send an E-mail message to: mailto:security-alert@hp.com

HP-UX B.11.00 and B.10.20 are potentially vulnerable.

HP-UX B.11.00
-------------
Install PHSS_17810 or subsequent. As of December 10, 2002 the
latest patch containing the fix is PHSS_27962.

HP-UX B.10.20
-------------
Install PHSS_19739 or subsequent.

The problem is not present in HP-UX B.11.11 and subsequent.

More details are available in the HP security bulletin
HPSBUX0308-273.

Using your itrc account security bulletins can be found here:

<http://itrc.hp.com/cki/bin/doc.pl/screen=ckiSecurityBulletin>

US-CERT Addendum

If you have feedback, comments, or additional information about this vulnerability, please send us email.