Avaya has acknowledged some vulnerabilities in PDS, which can be exploited by malicious, local users to gain escalated privileges.

For more information:
SA12942
SA11893
SA8046

The vulnerabilities affect PDS v9, v11, and HP-UX v11.00 based v12 platforms.

Solution
The vendor recommends removing the affected binaries or applying the patches from HP (see vendor advisory for more information).
Original Advisory
Avaya:
http://support.avaya.com/elmodocs2/security/ASA-2005-032_HPSBUX0302-241_HPSBUX01088_HPSBUX01061_HPSBUX01111_and_HPSBUX01113.pdf

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers