- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- Re: New sendmail issue?
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО03-31-2003 07:45 AM
тАО03-31-2003 07:45 AM
The advisory did not have any comment from HP, and I was wondering if a new patch was needed for our HP-UX 11.00 systems.
Thanks!
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО03-31-2003 08:30 AM
тАО03-31-2003 08:30 AM
Re: New sendmail issue?
____________________________________________
Hewlett-Packard
SOURCE: Hewlett-Packard Company HP Services Software Security Response Team
x-ref: SSRT3531
At the time of writing this document, Hewlett Packard is currently investigating the potential impact to HP's released Operating System software products.
As further information becomes available HP will provide notice of the availability of any necessary patches through standard security bulletin announcements and be available from your normal HP Services support channel.
____________________________________________
I've looked at our security bulletins and have not seen one for this yet. I'm sure that if/when an issue is found that a security bulletin will be issued regarding any potential problem w/ a recommended action to resolve.
To view security bulletins; start at the ITRC - http://www.itrc.hp.com -> click "maint and support" -> click "support info digests" at bottom of page, below notifications. Click "HP Security Bulletins Archive" at the bottom of page to view all sec bulletins.
Hope this helps,
-denver
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО03-31-2003 09:55 AM
тАО03-31-2003 09:55 AM
Re: New sendmail issue?
Thanks for the help there... I didn't even bother to check the CERT site... I thought maybe they'd send me an email when they updated, but I guess not.
Thanks for the information.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО03-31-2003 09:56 AM
тАО03-31-2003 09:56 AM
SolutionI do not believe there will be any other release until then.
Berlene
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-01-2003 09:19 PM
тАО04-01-2003 09:19 PM
Re: New sendmail issue?
That hardly seems to be a balanced approach.
Sendmail is becoming a very large security issue draining my resources from a complex server rollout project.
My resources refers to my time.
SEP
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-02-2003 12:52 AM
тАО04-02-2003 12:52 AM
Re: New sendmail issue?
See my posting on same issue here:
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xc43eb941255cd71190080090279cd0f9,00.html
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-02-2003 12:30 PM
тАО04-02-2003 12:30 PM
Re: New sendmail issue?
Comment 1) HP does seem to take its time patching what is in effect Open Source software. OTOH I built Sendmail 8.12.8 on an 11.00 box (selectively patched). My first issue was with PMTU. I was missing a Cumulative ARPA patch and mail to sites using CISCO PIX firewalls and the 'Mail Guard' feature turned on stalled in the queue. Once that was fixed after running for 36 hours I started seeing kernel memory leaks.
I suspect my GNU toolchain..but haven't verified that as the problem yet.
I fell back to HP 8.11.1 + JagGae58098 and that worked fine.
Comment 2) Don't make it easy to find hackable targets!!!
WHY does sendmail (from HP or sendmail.org) have to identify its version in the smtp greeting , the help message, and any message headers. HP's case is even worse since the most recently applied patch is also identified.
An administrator can modify the greeting message, and can modify the headers, and can remove the version from the help file. BUT if you remove the whole help file sendmail will generate a HARD CODED message telling you help is not available - with it's version embedded in the message.
Berlen H. please pass these last comments along to see if the next patch can obscure version/patch info from the outside world.
TIA,
Scott.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-03-2003 01:00 PM
тАО04-03-2003 01:00 PM
Re: New sendmail issue?
O SmtpGreetingMessage=$j Sendmail $v/$Z; $b
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-04-2003 05:29 AM
тАО04-04-2003 05:29 AM
Re: New sendmail issue?
see
SECURITY BULLETIN: HPSBUX0304-253
You need sendmail.811.11.11.r2.