topic Re: Backdoors in Operating System - HP-UX

Backdoors

Anu Lanka — Tue, 30 Apr 2002 19:29:33 GMT

Are there any known backdoor programs associated with HP-UX 11i? [Similar to backdoor leapfrog]

Re: Backdoors

harry d brown jr — Tue, 30 Apr 2002 19:34:38 GMT

leapfrog is an M$ (micro-soft) issue, and because it's so easy to get users to click on attachments in M$ OS's it's easy to get these things installed.

I would imagine that you could have users install ROGUE processes, but they could only assume that users access priviledges, and they would have to explicitly install them. Now if a root user was to install a trojan horse, well shame on them!

live free or die
harry

Re: Backdoors

Christopher Caldwell — Tue, 30 Apr 2002 20:57:48 GMT

There are plenty of holes if you're running insecure or unpatched system. Here's a few:

http://www.ciac.org/ciac/bulletinsByType/vndr_hp_bulletins.html

Re: Backdoors

Bill Hassell — Tue, 30 Apr 2002 22:00:42 GMT

Like any non-trivial operating system, there are going to be exploits. However, there is virtually nothing in HP-UX that is similar to any version of PC Windows. HP-UX is shipped in an open state for the most part and you must take explicit steps to secure the operating system PRIOR to connecting it to a network. The changes may be simple modifications to /etc/profile, to turning off network daemons to installing IDS/9000...the steps are very dependent on your environment.

Re: Backdoors

Wodisch — Tue, 30 Apr 2002 23:33:42 GMT

Hi Anu,

you could read the "bastion host" script to get information about what to close down to make your system more secure...

Get it from there:
http://people.hp.se/stevesk/bastion.html

HTH,
Wodisch

Re: Backdoors

John Carr_2 — Wed, 01 May 2002 06:28:42 GMT

Hi

hpux has its security issues and has rightly been pointed out is shipped in an open state.

however it is still much more than secure than NT , now what did Bill Gates say NT stands for yes I remeber "No Trust"

cheers
John.