web upgrade sendmail 8.11.1 on 11.00 and 11.11

[Berlene Herren]

=================================================================
A security bulletin has been revised:

-----------------------------------------------------------------
**REVISED 05**
Source: HEWLETT-PACKARD COMPANY
SECURITY BULLETIN: HPSBUX0304-253
Originally issued: 03 April 2003
Last revised: 20 May 2003
SSRT3531 Potential Security Vulnerability in sendmail (rev.5)


-----------------------------------------------------------------

To access the bulletin from the itrc:

Select "maintenance and support"
Select "search technical knowledge base"
Select "HP-UX Software Security Bulletins"
Select "Search by Security Bulletin Number"
Enter "HPSBUX0304-253"
Search

The complete list of security bulletins can be found here:

http://itrc.hp.com/cki/bin/doc.pl/screen=ckiSecurityBulletin
=================================================================

Berlene

[Steven E. Protter]

The document doesn't actually make it clear how to get the depot.

ftp://sendmail:sendmail@192.170.19.51

or ftp 192.170.19.51
name sendmail
password sendmail

HPSecurityBul253.depot.gz

SEP

[Berlene Herren]

Here's what my daddy would say: "I think some people would complain if you hung them with a new rope." (LOL) It has been the same instructions/location for the past five revisions.
Note: All the files mentioned for download below are
available from the following ftp site:

System: hprc.external.hp.com (192.170.19.51)
Login: sendmail
Password: sendmail

FTP Access: ftp://sendmail:sendmail@hprc.external.hp.com/
or: ftp://sendmail:sendmail@192.170.19.51/
or: ftp hprc.external.hp.com

Berlene

[Steven E. Protter]

:-)

SEP

[someone_4]

Hi Berlene

I hope you are still reading this because I was wondering what am I supposed to download from the ftp website? The sendmail-811_1.03.depot or HPSecurityBul253.depot? I did notice that the sendmail-811_1.03.depot was put up 5/20/2003. Is this the depot that has all the recent "fixes" in one sendmail patch?


Thanks
Richard

[Mark Greene_1 · Accepted solution]

Richard,

The web upgrade (sendmail-811_1.03.depot) is only for sendmail version 8.11; the HPSecurityBul253.depot is for sendmail version 8.9.3 and below. You can get your sendmail version by running this:

echo \$Z | /usr/sbin/sendmail -bt -d

HTH

mark