CVE-2007-2246: High severity HPE HP-UX vulnerability

Published Apr 25, 2007

Updated

Unspecified vulnerability in HP-UX B.11.00 and B.11.11, when running sendmail 8.9.3 or 8.11.1; and HP-UX B.11.23 when running sendmail 8.11.1; allows remote attackers to cause a denial of service via unknown attack vectors. NOTE: due to the lack of details from HP, it is not known whether this issue is a duplicate of another CVE such as CVE-2006-1173 or CVE-2006-4434.

Affected Software

5 affected components

HPE HP-UX=11.00

HPE HP-UX=11.11

HPE HP-UX=11.23

Sendmail Sendmail=8.9.3

Sendmail Sendmail=8.11.1

Remediation

Patch Available

http://secunia.com/advisories/24990

Event History

Apr 25, 2007

CVE Published

04:19 PM

Data Sourced

04:19 PM

DescriptionWeaknessAffected Software

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-2246?

The severity of CVE-2007-2246 has not been explicitly detailed, but it allows for a denial of service which can impact system availability.

How do I fix CVE-2007-2246?

To mitigate CVE-2007-2246, it is recommended to upgrade to a non-vulnerable version of Sendmail or apply any available patches from HP.

Which versions of Sendmail are affected by CVE-2007-2246?

CVE-2007-2246 affects Sendmail versions 8.9.3 and 8.11.1.

What operating systems are impacted by CVE-2007-2246?

CVE-2007-2246 impacts HP-UX versions B.11.00, B.11.11, and B.11.23.

Can CVE-2007-2246 be exploited remotely?

Yes, CVE-2007-2246 can be exploited remotely, allowing attackers to induce a denial of service.