Some versions of FrameMaker come with a license server that allows
ordinary users to change the permissions of any file on your system
to allow reading and writing.  The bad guys know about this bug.
Allegedly it happens only if fm_fls is set-userid root, and the
workaround until your vendor supplies a patch is to remove the
set-userid bit from the permissions for that file.

For the full text, see
	ftp://info.cert.org/pub/cert_advisories/CA-96.18.fm_fls