Buffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and previous versions allows local users to gain privileges.
hp hp-ux 10.00
hp hp-ux 11.00