HP has issued patches for HP-UX, which fix an old vulnerability. This can be exploited by malicious, local users to access arbitrary files on a vulnerable system.

The vulnerability is caused due to an input validation error in the "getdbm" procedure in ypxfrd. This can be exploited via directory traversal attacks to read arbitrary files.

The vulnerability affects HP-UX B.10.20, B.10.26, B.11.00, B.11.11, and B.11.22.

Solution
Apply the following patches available at:
Further details available in Customer Area

Provided and/or discovered by
Janusz Niewiadomski

Deep Links
Links available in Customer Area