Vulnerability Details CVE-2003-1362
Bastille B.02.00.00 of HP-UX 11.00 and 11.11 does not properly configure the (1) NOVRFY and (2) NOEXPN options in the sendmail.cf file, which could allow remote attackers to verify the existence of system users and expand defined sendmail aliases.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.9%
CVSS Severity
CVSS v2 Score 7.8
References
- http://archives.neohapsis.com/archives/hp/2003-q1/0033.html
- http://www.securityfocus.com/bid/6878
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11366
- http://archives.neohapsis.com/archives/hp/2003-q1/0033.html
- http://www.securityfocus.com/bid/6878
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11366