CVE-2003-1362

CVE-2003-1362 describes a misconfiguration vulnerability in Bastille B.02.00.00 on HP-UX 11.00 and 11.11, where sendmail.cf options NOVRFY and NOEXPN are not properly set. This flaw allows remote attackers to verify the existence of system users and expand sendmail aliases. With a CVSS score of 7.8 (High), this vulnerability has a network attack vector, low attack complexity, and a high impact on confidentiality due to information disclosure. Despite its age and high FAUCET Risk Score of 86/100, there is no evidence of active exploitation, no known exploit code in Metasploit, Nuclei, or ExploitDB, and it is not listed in the KEV catalog, though it has garnered significant community discussion.