topic Re: Check rootkit for HP-UX in Operating System - HP-UX

Check rootkit for HP-UX

Jayan Moolayil — Wed, 20 Feb 2002 17:51:26 GMT

Is there one available? Or there any third party software to do this?

I would like some help on this, please?

Thanks

Debu

Re: Check rootkit for HP-UX

Sanjay_6 — Wed, 20 Feb 2002 17:55:52 GMT

Hi,

What do you mean by check root kit?.

Thanks

Re: Check rootkit for HP-UX

Sanjay_6 — Wed, 20 Feb 2002 17:59:36 GMT

Hi,

If you are looking for a patch to check the security on your system, you can try this,

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProducts.pl?group_type=search&group_name=security+patch+check

Hope this helps.

Regds

Re: Check rootkit for HP-UX

Jayan Moolayil — Wed, 20 Feb 2002 18:20:25 GMT

What I meant was the following : For Linux there is a GNU product called (I believe) chkrootkit, which detects if rootkit has been installed on your system by a hacker. Is there a similar product for HP-UX, or will the patch do the same function?

Re: Check rootkit for HP-UX

Sanjay_6 — Wed, 20 Feb 2002 18:37:40 GMT

hi Debu,

The patch checks your hp-ux system to see how secure your system is or if it has been compromised in any manner. You can also look at the hp security home page,

http://www.hp.com/security/

Hope this helps.

regds

Re: Check rootkit for HP-UX

Steven Sim Kok Leong — Thu, 21 Feb 2002 02:40:30 GMT

Hi,

A rootkit usually replaces your ls, ps and netstat commands.

If you run the untampered binaries from a cdrom, you will be able to find traces of a rootkit from the output eg. in ps and netstat.

Hope this helps. Regards.

Steven Sim Kok Leong