COMMAND

    Novell Netware (3.12)

SYSTEMS AFFECTED

    HP 9000 Series  700/800s running only  specific releases of  HP-UX
    9.X and 10.X.

PROBLEM

    Hewlett-Packard  Company  has  discovered  a  defect in the Novell
    Netware 3.12  product running  on HP-UX.   This defect  is seen on
    both 9.04  and 10.X  operating systems,  and allows  users to read
    files from  an unauthorized  PC.   Native Netware  is exempt  from
    this  defect.   Note  that  the  product  in question only runs on
    HP-UX releases 9.04,  10.01, 10.10, or  10.20.  In  such situation
    Novell Netware  3.12 release  B.10.08 or  earlier, and  B.09.05 or
    earlier allows unauthorized users to read files.

SOLUTION

    For HP-UX  9.04 users,  simply obtain  Netware release B.09.08.002
    to be  used as  a full  product replacement.   This is  the  patch
    PHNE_11684.  Installation will require rebooting the server.

    For 10.01 users,  before continuing to  use Netware, first  obtain
    PHNE_10341 (the full product  replacement patch B.10.08) and  then
    apply patch PHNE_11722 (B.10.08.002).  PHNE_11722 will not install
    unless PHNE_10341 has been previously installed.

    For HP-UX 10.10  and 10.20 update  to the Netware  B.10.08 release
    from  the  latest  application  release  CD, DART32 or newer. Then
    install the appropriate patch (PHNE_11723 for HP-UX release  10.10
    or PHNE_11724 for HP-UX release 10.20).