Sun has issued updated packages for mgetty. These fix two vulnerabilities, which can be exploited to compromise a vulnerable system or escalate privileges.

Mgetty doesn't validate the user name supplied by the modem, when calling external programs. This allows malicious users to overflow the buffer and execute arbitrary code with root privileges.

Also, local users are able to circumvent the permissions in faxspool. This allows local users to send faxes regardless of permissions.

Solution
Updated packages:
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers