HP has provided the following patches to resolve this vulnerabilities.
HP-UX Release
|
Sendmail version
|
Action
|
B.11.11
|
8.9.3
|
PHNE_40393 or subsequent
|
B.11.11
|
8.11.1
|
Upgrade to sendmail 8.13.3 or subsequent
|
B.11.23
|
8.11.1
|
PHNE_40388 or subsequent
|
Note:
Installations of HP-UX B.11.11 running sendmail 8.11.1 should upgrade to sendmail 8.13.3 or subsequent. This Sendmail 8.13.3 Special Release Upgrade is available for download from
http://software.hp.com
Note:
To determine if a system has an affected version, search the output of "swlist -a revision -l fileset" for an affected fileset. Then determine if the recommended patch or update is installed. The patches are available for download from
http://itrc.hp.com
MANUAL ACTIONS:
Yes
PRODUCT SPECIFIC INFORMATION
HP-UX Software Assistant:
HP-UX Software Assistant is an enhanced application that replaces HP-UX Security Patch Check. It analyzes all Security Bulletins issued by HP and lists recommended actions that may apply to a specific HP-UX system. It can also download patches and create a depot automatically. For more information see:
https://www.hp.com/go/swa
The following text is for use by the HP-UX Software Assistant.
AFFECTED VERSIONS
HP-UX B.11.11
=============
InternetSrvcs.INETSVCS-RUN
action: install PHNE_40393 or subsequent
HP-UX B.11.11
=============
SMAIL-811.INETSVCS-SMAIL
action: remove SMAIL-811 install SMAIL-813
HP-UX B.11.23
=============
InternetSrvcs.INETSVCS-RUN
InternetSrvcs.INETSVCS2-RUN
action: install PHNE_40388 or subsequent
END AFFECTED VERSIONS