CVE Daily

CVE-2003-1362

Bastille B.02.00.00 of HP-UX 11.00 and 11.11 does not properly configure the (1)...

High CVSS 7.8

Overview

Bastille B.02.00.00 of HP-UX 11.00 and 11.11 does not properly configure the (1) NOVRFY and (2) NOEXPN options in the sendmail.cf file, which could allow remote attackers to verify the existence of system users and expand defined sendmail aliases.

CWE: CWE-16 Published: 2003-12-31T05:00:00.000
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.8 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags