The risk is high. The information in the following Security Bulletin should be acted upon as soon as possible. Hewlett-Packard Company will not be liable for any consequences to any customer resulting from customer's failure to fully implement instructions in this Security Bulletin as soon as possible. Users can initiate a Denial of Service. Apply the patches listed below.
All patches are available now.
Public domain fixes now in sendmail 8.9.3 have been ported to HP-UX sendmail 8.8.6 release patch. B. Fixing the problem For HP-UX releases prior to 10.20, upgrade from sendmail 5.65 to sendmail release 8.8.6. Any other use of this information is prohibited. HP is not liable for any misuse of this information by any third party. This document was prepared as an account of work sponsored by an agency of the United States Government.