HP-UX PHNE_35483 : s700_800 11.00 sendmail(1M) 8.9.3 patch

Critical Nessus Plugin ID 26133

Synopsis

The remote HP-UX host is missing a security-related patch.

Description

s700_800 11.00 sendmail(1M) 8.9.3 patch :

The remote HP-UX host is affected by multiple vulnerabilities :

- A potential security vulnerability has been identified with HP-UX running sendmail, where the vulnerability may be exploited remotely to gain unauthorized access and create a Denial of Service (DoS). References: CERT CA-2003-07, CAN-2002-1337. (HPSBUX00246 SSRT3469)

- A vulnerability has been identified in sendmail which may allow a remote attacker to execute arbitrary code.
References: CVE-2006-0058, US-CERT VU#834865.
(HPSBUX02108 SSRT061133)

- A potential security vulnerability has been identified with HP-UX running sendmail, where the vulnerability could be exploited remotely to gain unauthorized privileged access. References: CERT/CC CA-2003-25, CAN-2003-0681. (HPSBUX00281 SSRT3631)

- A potential security vulnerability has been identified with HP-UX sendmail, where the vulnerability may be exploited remotely to gain unauthorized access or create a denial of service (DoS). References: CERT CA-2003-12.
(HPSBUX00253 SSRT3531)

- A potential security vulnerability has been identified with HP-UX running sendmail. This vulnerability could allow a remote user to cause a Denial of Service (DoS).
(HPSBUX02183 SSRT061243)

Solution

Install patch PHNE_35483 or subsequent.

See Also

http://www.nessus.org/u?7e44f628

http://www.nessus.org/u?b715e4f4

http://www.nessus.org/u?8ac166f8

http://www.nessus.org/u?f41ededc

http://www.nessus.org/u?6b002323

Plugin Details

Severity: Critical

ID: 26133

File Name: hpux_PHNE_35483.nasl

Version: 1.21

Type: local

Published: 2007/09/25

Updated: 2018/07/12

Dependencies: 12634

Risk Information

Risk Factor: Critical

CVSS v2.0

Base Score: 10

Temporal Score: 8.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:H/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/o:hp:hp-ux

Required KB Items: Host/local_checks_enabled, Host/HP-UX/version, Host/HP-UX/swlist

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2007/01/03

Vulnerability Publication Date: 2006/03/22

Reference Information

CVE: CVE-2002-1337, CVE-2003-0161, CVE-2003-0681, CVE-2003-0694, CVE-2006-0058, CVE-2007-2246

BID: 6991

CERT-CC: 2003-07, 2003-12, 2003-25

CERT: 834865

HP: emr_na-c00629555, emr_na-c00841370, emr_na-c00958338, emr_na-c00958571, emr_na-c01035741, HPSBUX00246, HPSBUX00253, HPSBUX00281, HPSBUX02108, HPSBUX02183, SSRT061133, SSRT061243, SSRT3469, SSRT3531, SSRT3631

CWE: 399