PT-2003-2307 · Sendmail+1 · Sendmail.Cf+1

Publicado 2003-12-31 · Atualizado 2017-07-29 · CVE-2003-1362

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions HP-UX versions 11.00 and 11.11

Description The issue is related to the improper configuration of the NOVRFY and NOEXPN options in the sendmail.cf file. This could allow remote attackers to verify the existence of system users and expand defined sendmail aliases.

Recommendations For HP-UX version 11.00, properly configure the NOVRFY and NOEXPN options in the sendmail.cf file to prevent remote attackers from verifying system users and expanding sendmail aliases. For HP-UX version 11.11, properly configure the NOVRFY and NOEXPN options in the sendmail.cf file to prevent remote attackers from verifying system users and expanding sendmail aliases.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2003-1362

Produtos afetados

Hp-Ux

Sendmail.Cf

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/11366 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1362 · Nota de Segurança
• http://securityfocus.com/bid/6878 · Correção
• http://archives.neohapsis.com/archives/hp/2003-q1/0033.html · Aviso do Fabricante