movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges.
hp hp-ux 10.20