Operating System - HP-UX
1832754 Members
2873 Online
110045 Solutions
New Discussion

Fix ISS scan vulnerabilities on HP 10.20

 
Hadayati Abdul Jalil_1
Occasional Contributor

Fix ISS scan vulnerabilities on HP 10.20

Hi,

I have the following vulnerabilities found on my HP10.20. I have searched high and low for solutions but to no avail. Hope to get some help from this forum. Thanks.

1. Ftpd args core dump. The suggested remedy is to upgrade to latest ftp. I don't have wu-ftp installed. So which latest ftp should I install?

2. FTP server allows the chmod command to be executed. The suggested remedy is to configure the ftp server to disallow chmod command. But I do not see where I could configure the ftp server.

3. Third-party mail relaying can be used to obfuscate the origin of emails. The suggested remedy is to reconfigure SMTP server. I cannot find how I could configure this either.

4. System allocates ports in a sequential or predictable order. No remedy suggested for this.

5. Files obtained. Specific files were obtained through various vulnerabilities. Do not understand the suggested remedy, which is to correct vulnerabilities found in ftp. rexec, rlogin, rsh, telnet, tftp, nis.