Detections
Analytics
HP-UX PHNE_35485 : s700_800 11.23 sendmail(1M) 8.11.1 patch
critical Nessus Plugin ID 26135
Synopsis
The remote HP-UX host is missing a security-related patch.Description
s700_800 11.23 sendmail(1M) 8.11.1 patch :The remote HP-UX host is affected by multiple vulnerabilities :
- A potential security vulnerability has been identified with HP-UX running sendmail. This vulnerability could allow a remote user to cause a Denial of Service (DoS).
(HPSBUX02183 SSRT061243)
- A vulnerability has been identified in sendmail which may allow a remote attacker to execute arbitrary code.
References: CVE-2006-0058, US-CERT VU#834865.
(HPSBUX02108 SSRT061133)
- A potential security vulnerability has been identified with HP-UX running sendmail, where the vulnerability could be exploited remotely to gain unauthorized privileged access. References: CERT/CC CA-2003-25, CAN-2003-0681. (HPSBUX00281 SSRT3631)
Solution
Install patch PHNE_35485 or subsequent.See Also
http://www.nessus.org/u?8ac166f8
Plugin Details
Severity: Critical
ID: 26135
File Name: hpux_PHNE_35485.nasl
Version: 1.21
Type: local
Family: HP-UX Local Security Checks
Published: 9/25/2007
Updated: 1/11/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Critical
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/o:hp:hp-ux
Required KB Items: Host/local_checks_enabled, Host/HP-UX/version, Host/HP-UX/swlist
Patch Publication Date: 12/21/2006
Vulnerability Publication Date: 3/22/2006
Reference Information
CVE: CVE-2003-0681, CVE-2003-0694, CVE-2006-0058, CVE-2007-2246