Lucene search
HistoryOct 17, 2007 - 1:00 a.m.
CVE-2003-1362
bastille
hp-ux
sendmail
configuration
vulnerability
cve-2003-1362
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
7.1 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.7%
Bastille B.02.00.00 of HP-UX 11.00 and 11.11 does not properly configure the (1) NOVRFY and (2) NOEXPN options in the sendmail.cf file, which could allow remote attackers to verify the existence of system users and expand defined sendmail aliases.
Affected configurations
Node
hpbastilleMatchb.02.00.05hp-ux
ORhphp-uxMatch11.00
ORhphp-uxMatch11.11
| CPE | Name | Operator | Version |
|---|---|---|---|
| hp:bastille | hp bastille | eq | b.02.00.05 |
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
7.1 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.7%
Related for CVE-2003-1362