Security patch for Internet Express sendmail 8.9.3 through 8.12.9 SSRT3631

TITLE: Security patch for Internet Express sendmail 8.9.3 through 8.12.9 SSRT3631
 
New Kit Date:       23-OCT-2003
Modification Date:  Not Applicable
Modification Type:  NEW KIT

Copyright (c) Hewlett-Packard Company 2003.  All rights reserved.


PRODUCT:    Internet Express [R] V5.4 through V6.1
SOURCE:     Hewlett-Packard Company

ECO INFORMATION:

     ECO Name:  T64V51AB-IX-574-SENDMAIL--SSRT3631
     ECO Kit Approximate Size:  17.6 MB
     Kit Applies To:  HP Tru64 UNIX 5.0A and higher


V5.7 kit: T64V51AB-IX-574-SENDMAIL-SSRT3613.tar
         sum: 62560   1360
        cksum: 4124205045 1392640

ECO KIT SUMMARY:

A setld(8)-based, Early Release Patch kit exists for Internet Express versions
5.4 through 6.1 that contains solutions to the following problem(s):

The following potential security vulnerabilities have been identified or
reported in the HP Tru64 UNIX operating system that may result in
unauthorized Privileged Access or a Denial of Service (DoS). These potential
vulnerabilities may be in the form of Local and Remote security domain risks.
HP has corrected these potential vulnerabilities.

The README document provide patch kit installation and removal instructions
and a summary of the patch. Please read the README document prior to
installing patches on your system.


INSTALLATION NOTES:

1) Install this kit with the setld(8) utility that is included in the Tru64
   UNIX operating system.
 2) The patch in this ERP kit does not have any file intersections with any
   other ERP available at this time for this product version.

3) This ERP kit will NOT install over any Customer Specific Patches (CSPs)
   which have file intersections with this ERP kit. Contact your normal
   Service Provider for assistance if the installation of this ERP kit is
   blocked by any of your installed CSPs.

4) This patch was released on or about 09/25/03.


INSTALLATION PREREQUISITES:

You must have installed the IAESMTPxxx subset (where xxx is the subset
version number) from Internet Express version V5.4 through V6.1 on HP
Tru64 UNIX 5.0A or higher prior to installing this Early Release Patch Kit.


INSTALLATION INSTRUCTIONS:
To determine if this patch kit is needed:

        # su root
        # /usr/sbin/sendmail -bt -d0,1 | grep Version
        Version 8.12.1

Any sendmail version from 8.9.3 through 8.12.9  must be patched with this
kit. 

To install this patch kit:

        # su root
        # tar xvf T64V51AB-IX-574-SENDMAIL-SSRT3631.tar
        # cd sendmail_kit
        # setld -l . IAESMTP574

To remove this patch kit:

        # su root
        # setld -d IAESMTP574


KNOWN PROBLEMS WITH THE PATCH KIT:

None.

Files on this server are as follows:

»t64v51ab-ix-574-sendmail-ssrt3631.README
»t64v51ab-ix-574-sendmail-ssrt3631.CHKSUM
»t64v51ab-ix-574-sendmail-ssrt3631.tar