SSRT3531 Potential Security Vulnerability in sendmail (rev.7)

[Berlene Herren]

=================================================================
A security bulletin has been issued:

-----------------------------------------------------------------
**REVISED 07**
Source: HEWLETT-PACKARD COMPANY
SECURITY BULLETIN: HPSBUX0304-253
Originally issued: 03 April 2003
Last revised: 21 July 2003
SSRT3531 Potential Security Vulnerability in sendmail (rev.7)

-----------------------------------------------------------------

To access the bulletin from the itrc:

Select "maintenance and support"
Select "search technical knowledge base"
Select "HP-UX Software Security Bulletins"
Select "Search by Security Bulletin Number"
Enter "HPSBUX0304-253"
Search

The complete list of security bulletins can be found here:

http://itrc.hp.com/cki/bin/doc.pl/screen=ckiSecurityBulletin
=================================================================

**REVISED 07**
SOLUTION: B.10.10 - Download and install the appropriate files
--> B.10.20 - install PHNE_28760
--> B.11.00 (sendmail-8.9.3) - install PHNE_28809
--> B.11.04 - Download and install the appropriate files
--> B.11.11 (sendmail-8.9.3) - install PHNE_28810
--> B.11.22 - install PHNE_28409

The sendmail files also address the
issues documented in HPSBUX0302-246.

If the sendmail files from HPSBUX0304-253
are installed, it is not necessary to install
the sendmail files from HPSBUX0302-246.

If both sets of sendmail files are installed,
the sendmail files from HPSBUX0304-253 must be
installed *AFTER* the sendmail files from
HPSBUX0302-246 in order to ensure all issues are
addressed.

Berlene