UCF STIG Viewer Logo

The SMTP service must be an up-to-date version.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4689 GEN004600 SV-4689r2_rule VIVM-1 High
Description
The SMTP service version on the system must be current to avoid exposing vulnerabilities present in unpatched versions.
STIG Date
VMware ESX 3 Server 2016-05-13

Details

Check Text ( C-627r2_chk )
Determine the version of the SMTP service software.

Locate the Sendmail daemon.
Procedure:
# find / -name sendmail

Obtain version information for the Sendmail daemon.
Procedure:
# what
OR
# strings | grep version

Version 8.14.4 is the latest required version.

If the Sendmail version is not at least 8.14.4 or the vendor's latest version, this is a finding.
Fix Text (F-4617r2_fix)
Obtain and install a newer version of Sendmail from the operating system vendor or from http://www.sendmail.org or ftp://ftp.cs.berkeley.edu/ucb/sendmail.