Vulnerability Note VU#349305

HP-UX sendmail vulnerable to denial of service

Overview

HP-UX contains an unspecified vulnerability in sendmail, which may allow a remote, unauthenticated attacker to cause a denial of service.

I. Description

HP-UX systems running sendmail are vulnerable to an unspecified denial of service. According to HP technical document c00841370, the following versions are affected

HP-UX B.11.00 (obsolete) running sendmail 8.9.3 or sendmail 8.11.1, HP-UX B.11.11 running sendmail 8.9.3 or sendmail 8.11.1, HP-UX B.11.23 running sendmail 8.11.1.

Note that this vulnerability only affects sendmail on HP-UX systems.

II. Impact

A remote, unauthenticated attacker may be able to create a denial-of-service condition on a vulnerable HP-UX system.

III. Solution

Apply an update

Apply an update, as specified in HP technical document c00841370.

Systems Affected

Vendor	Status	Date Notified	Date Updated
Hewlett-Packard Company	Vulnerable	25-Apr-2007

References

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00841370
http://secunia.com/advisories/24990/

Credit

Thanks to HP for reporting this vulnerability.

This document was written by Will Dormann.

Other Information

Date Public:	2007-04-16
Date First Published:	2007-04-25
Date Last Updated:	2007-04-25
CERT Advisory:
CVE-ID(s):
NVD-ID(s):
US-CERT Technical Alerts:
Metric:	1.78
Document Revision:	8

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Produced 2007 by US-CERT, a government organization
Disclaimers and copyright information

Get Adobe Reader