HP urges you to act on this information as soon as possible. The information in the following Security Bulletin should be acted upon as soon as possible. Packard will not be liable for any consequences to any customer resulting from customer's failure to fully implement instructions in this Security Bulletin as soon as possible. Sendmail permits unauthorized remote program execution. Remote users can cause sendmail to execute any program.
All patches are available now.
B. Fixing the problems The two vulnerabilities can be eliminated from releases 8.x and 9.x of HP-UX by applying a patch. If there is any evidence of an intrusion, system administrators are strongly urged to require password changes for all accounts. Hewlett Packard's HP-UX patches are available via email and the World Wide Web. The users guide explains the process for downloading HP-UX patches via email and other services available. Apply the patch to your HP-UX system.