The SMTP service must be an up-to-date version.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-4689	GEN004600	SV-35065r2_rule	VIVM-1	High

Description
The SMTP service version on the system must be current to avoid exposing vulnerabilities present in unpatched versions.

STIG	Date
HP-UX 11.23 Security Technical Implementation Guide	2015-12-02

Details

Check Text ( C-36572r2_chk )
Determine the version of the SMTP service software. To obtain version information for the Sendmail daemon: # what /usr/sbin/sendmail OR # strings /usr/sbin/sendmail | grep -i version If the Sendmail version is not at least 8.14.4, or if it is not the vendor's latest version, this is a finding.

Fix Text (F-31940r1_fix)
Obtain and install a newer version of Sendmail from the operating system vendor or from http://www.sendmail.org or ftp://ftp.cs.berkeley.edu/ucb/sendmail.