Vulnerability in HP sysdiag???

[security-alert () hp com (security-alert () hp com)]

To whom it may concern:

  Recent bugtraq discussions under the subject: "Vunerability in HP sysdiag???"
discuss exploitations using the system diagnostics.
  The Hewlett-Packard Co. Security Bulletin #11 dated 12-02-94 concerning
Security Vulnerability in CORE-DIAG fileset references a patch for HP-UX
release 9.04 (PHSS_4749) that has now been superceeded by PHSS_6300.  It also
has a dependency on patch PHKL_6100.  When properly installed both patches
(6300 & 6100) together will circumvent the behavior described.

      To subscribe to automatically receive future NEW HP Security
      Bulletins from the HP SupportLine mail service via electronic
      mail, send an email message to:

      support () us external hp com   (no Subject is required)

      Multiple instructions are allowed in the TEXT PORTION OF THE
      MESSAGE, here are some basic instructions you may want to use:

      To add your name to the subscription list for new security
      bulletins, send the following in the TEXT PORTION OF THE MESSAGE:

                  subscribe security_info

      To retrieve the index of all HP Security Bulletins issued to
      date, send the following in the TEXT PORTION OF THE MESSAGE:

                  send security_info_list

      To get a patch matrix of current HP-UX and BLS security
      patches referenced by either Security Bulletin or Platform/OS,
      put the following in the text portion of your message:

                  send hp-ux_patch_matrix

      World Wide Web service for browsing of bulletins is available
      via our URL: http://us.external.hp.com

       Choose "Support news", then under Support news,
       choose "Security Bulletins"