COMMAND

    TurboIMAGE DBUTIL

SYSTEMS AFFECTED

    HP3000 running MPE/iX release 4.5 and newer.

PROBLEM

    Following  is  based  on  HP  Support  Information Digests. HP has
    learned  of  a  procedure  by  which  a  user  can gain additional
    privileges using DBUTIL.PUB.SYS.

SOLUTION

    Secure DBUTIL.PUB.SYS and your database schemas with a lockword.
    For example, in CI prompt

        :RENAME DBUTIL.PUB.SYS, DBUTIL/LOCK.PUB.SYS
                                /

    A  temporary  fix  in  the  DBUTIL  program  is also available for
    download on the JAZZ web server at:

        http://jazz.external.hp.com/src/

    It is under the DBUTIL.PUB.SYS program.

    You will  need to  save the  your system's  old DBUTIL program and
    later on swap it back when you install TurboIMAGE patch, to  avoid
    PATCH/iX from complaining about the checksum mismatch.

    Apply the patch noted below:

        MPE/iX 5.5 release, install TIXLX74A,
        MPE/iX 6.0 release, install TIXLX74B,
        MPE/iX 6.5 release, install TIXLX74C.

    Hewlett-Packard Company will not produce any patches for  releases
    MPE/iX 4.5 and MPE/iX 5.0.