HP-UX Get_System_Info Local Security Vulnerability
HP-UX is prone to a local vulnerability that may result in a change of network parameters.
This issue affects HP-UX running the Ignite-UX or the DynRootDisk (DRD) 'get_system_info' command.
A local attacker can exploit this issue to change certain network parameters without notification. For this to be a security issue, the 'get_system_info' command may be required to run setuid; the command's default permissions are currently not known.
A successful exploit of this issue may result in denial-of-service conditions; other attacks may also be possible.