Vulnerabilities > CVE-2003-1362 - Configuration vulnerability in HP Bastille B.02.00.05

047910
CVSS 7.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
NONE
Availability impact
NONE
network
low complexity
hp
CWE-16

Summary

Bastille B.02.00.00 of HP-UX 11.00 and 11.11 does not properly configure the (1) NOVRFY and (2) NOEXPN options in the sendmail.cf file, which could allow remote attackers to verify the existence of system users and expand defined sendmail aliases.

Vulnerable Configurations

Part Description Count
Application
Hp
1
OS
Hp
2

Common Weakness Enumeration (CWE)