uudecode does not verify if files exists before writing, also it does not verify if the filename contains path information. This allows arbitrary files to be overwritten, it does however require that the user executing uudecode has write access to the file.

The vulnerability could also be exploited by local users to gain privileges if other users uses uudecode in /tmp or another world writeable directories.

Solution
UnixWare 7.1.1
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers