How to Block RPC Services ( Port 111 ) to avoid buffer overflow

[Laurent Menase]

If you want stamped paper you'll need to contact hp support.

Else for already known security problems, all the communication is made through Security bulletins. - for instance there is once for ONC on 11.31, be sure to have ONC 11.31.06 installed-

[T G Manikandan]

What OS are you talking about?

[Eric Unix]

Hello All

1.My OS is hp unix 11.11 and hp unix 11.23
2. Does there are any patch to fix it ?


BR
eric

[Laurent Menase]

I am not aware of any known problem there on 11.11 and 11.23.

[T G Manikandan]

I think you are talking about

http://www.cert.org/advisories/CA-2002-26.html

Please check.

[Laurent Menase]

The only recent problem is
HPSBUX02375 SSRT080122
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01570585

[Shailendran V Naidu]

Hi Eric,
I think the reason you are trying to block RPC Port 111 is to avoid a Buffer overflow.
But this kind of Vulnerability is in Microsoft Windows and not in HP-UX.

See:
http://www.microsoft.com/technet/security/bulletin/MS03-026.mspx

and

http://www.microsoft.com/technet/security/bulletin/MS03-039.mspx


Please verify with your Security auditor or Admin if they are providing the right advise for the Right Operating systems.

This after all may just be a confusion.