UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The SMTP service must be an up-to-date version.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4689 GEN004600 SV-35065r2_rule High
Description
The SMTP service version on the system must be current to avoid exposing vulnerabilities present in unpatched versions.
STIG Date
HP-UX 11.31 Security Technical Implementation Guide 2018-03-01

Details

Check Text ( C-36572r2_chk )
Determine the version of the SMTP service software. To obtain version information for the Sendmail daemon:
# what /usr/sbin/sendmail
OR
# strings /usr/sbin/sendmail | grep -i version

If the Sendmail version is not at least 8.14.4, or if it is not the vendor's latest version, this is a finding.
Fix Text (F-31940r1_fix)
Obtain and install a newer version of Sendmail from the operating system vendor or from http://www.sendmail.org or ftp://ftp.cs.berkeley.edu/ucb/sendmail.