TITLE: Security patch for Internet Express sendmail up to 8.13.6 (SSRT VU#834865) Copyright (c) Hewlett-Packard Company 2003. All rights reserved. PRODUCT: Internet Express [R] V6.3 SOURCE: Hewlett-Packard Company ECO INFORMATION: ECO Name: T64V51AB-IX-651-SENDMAIL-SSRT-061135 ECO Kit Approximate Size: 13.48 MB Kit Applies To: HP Tru64 UNIX 5.0A and higher T64V51AB-IX-651-SENDMAIL-SSRT-061135.tar.gz CheckSum 35751 11920 MD5 0b6268159a9957c56ff2f35cea2057d8 ECO KIT SUMMARY: A setld(8)-based, Early Release Patch kit exists for Internet Express versions 6.3 that contains solutions to the following problem(s): The following potential security vulnerabilities have been identified or reported in the HP Tru64 UNIX operating system that may result in unauthorized Privileged Access or a Denial of Service (DoS). These potential vulnerabilities may be in the form of Local and Remote security domain risks. HP has corrected these potential vulnerabilities. INSTALLATION NOTES: 1) Install this kit with the setld(8) utility that is included in the Tru64 UNIX operating system. 2) The patch in this ERP kit does not have any file intersections with any other ERP available at this time for this product version. 3) This ERP kit will NOT install over any Customer Specific Patches (CSPs) which have file intersections with this ERP kit. Contact your normal Service Provider for assistance if the installation of this ERP kit is blocked by any of your installed CSPs. 4) This patch was released on or about 05/24/06 INSTALLATION PREREQUISITES: You must have installed the IAESMTPxxx subset (where xxx is the subset version number) from Internet Express version V5.4 through V6.1 on HP Tru64 UNIX 5.0A or higher prior to installing this Early Release Patch Kit. INSTALLATION INSTRUCTIONS: To determine if this patch kit is needed: # su root # /usr/sbin/sendmail -bt -d0,1 | grep Version Version 8.12.1 Any sendmail version from 8.9.3 through 8.13.5 must be patched with this kit. To install this patch kit: # su root # gunzip T64V51AB-IX-651-SENDMAIL-SSRT-061135.tar.gz # tar xvf T64V51AB-IX-651-SENDMAIL-SSRT-061135.tar # cd sendmail_kit # setld -l . IAESMTP651 SPECIAL INSTRUCTIONS After the CSP Kit is installed, the "newaliases" program must be run before using the new version of sendmail. To remove this patch kit: # su root # setld -d IAESMTP651 KNOWN PROBLEMS WITH THE PATCH KIT: None.