TITLE:  Security patch for Internet Express sendmail 8.12.1 through 8.12.8 (SSRT3612
 
Copyright (c) Hewlett-Packard Company 2003.  All rights reserved.
 
 
PRODUCT:    Internet Express [R] V5.8 through V6.1
SOURCE:     Hewlett-Packard Company
 
ECO INFORMATION:
 
     ECO Name:  T64V51AB-IX6-SENDMAIL-58-61-SSRT3612
     ECO Kit Approximate Size:  17.6 MB
     Kit Applies To:  HP Tru64 UNIX 5.0A and higher
 
 
ECO KIT SUMMARY:
 
A setld(8)-based, Early Release Patch kit exists for Internet Express versions
5.8 through 6.1 that contains solutions to the following problem(s):
 
The following potential security vulnerabilities have been identified or
reported in the HP Tru64 UNIX operating system that may result in
unauthorized Privileged Access or a Denial of Service (DoS). These potential
vulnerabilities may be in the form of Local and Remote security domain risks.
HP has corrected these potential vulnerabilities.
 
The README document provide patch kit installation and removal instructions
and a summary of the patch. Please read the README document prior to
installing patches on your system.
 
 
INSTALLATION NOTES:
 
1) Install this kit with the setld(8) utility that is included in the Tru64
   UNIX operating system.
 2) The patch in this ERP kit does not have any file intersections with any
   other ERP available at this time for this product version.
 
3) This ERP kit will NOT install over any Customer Specific Patches (CSPs)
   which have file intersections with this ERP kit. Contact your normal
   Service Provider for assistance if the installation of this ERP kit is
   blocked by any of your installed CSPs.
 
4) This patch was released on or about 09/05/03.
 
 
INSTALLATION PREREQUISITES:
 
You must have installed the IAESMTPxxx subset (where xxx is the subset
version number) from Internet Express version V5.8 through V6.1 on HP
Tru64 UNIX 5.0A or higher prior to installing this Early Release Patch Kit.
 
 
INSTALLATION INSTRUCTIONS:
To determine if this patch kit is needed:
 
        # su root
        # /usr/sbin/sendmail -bt -d0,1 | grep Version
        Version 8.12.6
 
Any sendmail version from 8.12.1 through 8.12.8  must be patched with this
kit.  This patch is not necessary if the reported version  is 8.12.9.

To install this patch kit:
 
        # su root
        # tar xvf T64V51AB-IX6-SENDMAIL-58-61-SSRT3612.tar
	# cd sendmail_kit
        # setld -l . IAESMTP611
 
To remove this patch kit:
 
        # su root
        # setld -d IAESMTP611
 
 
KNOWN PROBLEMS WITH THE PATCH KIT:
 
None.
 
 
RELEASE NOTES FOR T64V51AB-IX6-SENDMAIL-58-61-SSRT3612:
 
This fix is included in the latest update to sendmail V8.12.9 will be shipped
with Internet Express V6.2, which is due to release in December 2003.
 
[R] UNIX is a registered trademark in the United States and other countries
licensed exclusively through X/Open Company Limited.
 
Copyright Hewlett-Packard Company 2003.  All Rights reserved.
 
  This software is proprietary to and embodies the confidential technology
  of Hewlett-Packard Company.  Possession, use, or copying of this
  software and media is authorized only pursuant to a valid written license
  from Hewlett-Packard or an authorized sublicensor.
 
       This ECO has not been through an exhaustive field test process.
       Due to the experimental stage of this ECO/workaround, Hewlett-Packard
       makes no representations regarding its use or performance. The
       customer shall have the sole responsibility for adequate protection
       and back-up data used in conjunction with this ECO/workaround.