topic Re: Vulnerability in rpc.ttbdserverd in Operating System - HP-UX

Vulnerability in rpc.ttbdserverd

Douglas Arneson — Fri, 16 Nov 2001 19:54:24 GMT

I have checked my server and find that rpc.ttbdserverd isn't in /etc/inetd.conf. Can I assume that my systems aren't vulnerable to the security breach?

Thanks!

Re: Vulnerability in rpc.ttbdserverd

Craig Rants — Fri, 16 Nov 2001 19:57:44 GMT

Douglas,
That just means that it will not get spawned by inetd. If someone happens to start it by command line you would be vulnerable. Check to see if it is installed on your box, then an only then could you really say your not vulnerable.

Good Luck,
C

Re: Vulnerability in rpc.ttbdserverd

John Bolene — Fri, 16 Nov 2001 20:06:01 GMT

Re: Vulnerability in rpc.ttbdserverd

harry d brown jr — Fri, 16 Nov 2001 20:27:20 GMT

Here is a great security doc, BTW all rpc services are security risks:

http://people.hp.se/stevesk/bastion.html

live free or die
harry