TITLE: Security patch for Internet Express sendmail 8.9.3 through 8.12.9 (SSRT3631) Copyright (c) Hewlett-Packard Company 2003. All rights reserved. PRODUCT: Internet Express [R] V5.4 through V6.1 SOURCE: Hewlett-Packard Company ECO INFORMATION: ECO Name: T64V51AB-IX-563-SENDMAIL--SSRT3631 ECO Kit Approximate Size: 17.6 MB Kit Applies To: HP Tru64 UNIX 5.0A and higher V5.6 kit: T64V51AB-IX-563-SENDMAIL-SSRT3613.tar sum: 27629 1350 cksum: 1556918233 1382400 ECO KIT SUMMARY: A setld(8)-based, Early Release Patch kit exists for Internet Express versions 5.4 through 6.1 that contains solutions to the following problem(s): The following potential security vulnerabilities have been identified or reported in the HP Tru64 UNIX operating system that may result in unauthorized Privileged Access or a Denial of Service (DoS). These potential vulnerabilities may be in the form of Local and Remote security domain risks. HP has corrected these potential vulnerabilities. The README document provide patch kit installation and removal instructions and a summary of the patch. Please read the README document prior to installing patches on your system. INSTALLATION NOTES: 1) Install this kit with the setld(8) utility that is included in the Tru64 UNIX operating system. 2) The patch in this ERP kit does not have any file intersections with any other ERP available at this time for this product version. 3) This ERP kit will NOT install over any Customer Specific Patches (CSPs) which have file intersections with this ERP kit. Contact your normal Service Provider for assistance if the installation of this ERP kit is blocked by any of your installed CSPs. 4) This patch was released on or about 09/25/03. INSTALLATION PREREQUISITES: You must have installed the IAESMTPxxx subset (where xxx is the subset version number) from Internet Express version V5.4 through V6.1 on HP Tru64 UNIX 5.0A or higher prior to installing this Early Release Patch Kit. INSTALLATION INSTRUCTIONS: To determine if this patch kit is needed: # su root # /usr/sbin/sendmail -bt -d0,1 | grep Version Version 8.12.1 Any sendmail version from 8.9.3 through 8.12.9 must be patched with this kit. To install this patch kit: # su root # tar xvf T64V51AB-IX-563-SENDMAIL-SSRT3631.tar # cd sendmail_kit # setld -l . IAESMTP563 To remove this patch kit: # su root # setld -d IAESMTP563 KNOWN PROBLEMS WITH THE PATCH KIT: None.