Backdoors

[Anu Lanka]

Are there any known backdoor programs associated with HP-UX 11i? [Similar to backdoor leapfrog]

[harry d brown jr]

leapfrog is an M$ (micro-soft) issue, and because it's so easy to get users to click on attachments in M$ OS's it's easy to get these things installed.

I would imagine that you could have users install ROGUE processes, but they could only assume that users access priviledges, and they would have to explicitly install them. Now if a root user was to install a trojan horse, well shame on them!

live free or die
harry

[Christopher Caldwell]

There are plenty of holes if you're running insecure or unpatched system. Here's a few:

http://www.ciac.org/ciac/bulletinsByType/vndr_hp_bulletins.html

[Bill Hassell]

Like any non-trivial operating system, there are going to be exploits. However, there is virtually nothing in HP-UX that is similar to any version of PC Windows. HP-UX is shipped in an open state for the most part and you must take explicit steps to secure the operating system PRIOR to connecting it to a network. The changes may be simple modifications to /etc/profile, to turning off network daemons to installing IDS/9000...the steps are very dependent on your environment.

[Wodisch]

Hi Anu,

you could read the "bastion host" script to get information about what to close down to make your system more secure...

Get it from there:
http://people.hp.se/stevesk/bastion.html

HTH,
Wodisch

[John Carr_2]

Hi

hpux has its security issues and has rightly been pointed out is shipped in an open state.

however it is still much more than secure than NT , now what did Bill Gates say NT stands for yes I remeber "No Trust"

cheers
John.