V-240444

Discussion

The version of the SMTP service can be used by attackers to plan an attack based on vulnerabilities present in the specific version.

Check Content

To check for the sendmail version being displayed in the greeting:

# more /etc/sendmail.cf | grep SmtpGreetingMessage

If it returns the following:

O SmtpGreetingMessage=$j Sendmail $v/$Z; $b

Then sendmail is providing version information, and this is a finding.