The information in the following Security Bulletin should be acted upon as soon as possible. Hewlett-Packard Company will not be liable for any consequences to any customer resulting from customer's failure to fully implement instructions in this Security Bulletin as soon as possible. The vacation program erroneously passes parameters to sendmail. Remote users could modify system files. Install the patches listed below.
All patches are available now.
Both sendmail 5.65 and 8.7.6 are vulnerable to this malady. Remember to save the User ID assigned to you, and your password. Once in the archive there is another link to our current Security Patch Matrix. Any other use of this information is prohibited. HP is not liable for any misuse of this information by any third party.