COMMAND

    /usr/bin/X11/gwind (called by: xwcreate and xwdestroy)

SYSTEMS AFFECTED

    HP-UX

PROBLEM

    The gwind program  is part of  the x-windows system  and is called
    by the xwcreate and xwdestroy programs to create or destroy a  new
    x-window.  The  problem  with  gwind  is  described in HP Security
    Bulletin  9410-018.  Unprivileged  users  can  get root or destroy
    files.

SOLUTION

    Patch PHSS_4832  is needed  for all  systems, but  that patch  has
    been superseded  by the  PHSS_5140 patch.  Users of  all HP-UX 9.x
    systems should download and install PHSS_5140.