HP-UX Security

[Paul T. Green]

I'm researching port scanning. Would like to know how can it be done to our HP-UX 11.0 servers. What are other utilities (within HP-UX) that can be used to compromise the HP-UX environment?

[MARTINACHE]

Have a look at this URL :

http://hpux.cs.utah.edu/hppd/hpux/Networking/Admin/multiscan-0.8.5/

Regards,

Patrice

[Shannon Petry]

Port sentry compiles very nicely into HP-UX. I use it on SunOS, HP-UX, IRIX, AIX and Linus.

Flexible rules and port restrictions are built in.

I dont remember the site. Send me e-mail for source code, I'll reply back with the attachment.

Regards,
Shannon

[Steven Sim Kok Leong]

Hi,

A good scanning tool is Saint at http://www.wwdsi.com. Current version is 3.1.3. Version 3.1.3b is freely downloadable. Other than its own tools, it combines the use of a number of other tools such as fping, nmap, sara to provide a very thorough scan of your servers across the network.

It has a web-based reporting interface and provides detailed explanation of the scan results including follow-up actions that you are suppose to take.

Since Saint versions are released pretty frequently for download, its data is satisfactorily up to date. Furthermore, you can modify the rulebase to add on additional vulnerabilities to scan for.

A recent root-exploit vulnerability with Omniback can be found at http://www.security.is. The HP patch for it was only recently released.

Hope this helps. Regards.

Steven Sim Kok Leong
Brainbench MVP for Unix Admin
http://www.brainbench.com

[Paul T. Green]

Shannon:

Thanks for the reply... I'd love to put out my address but i'm not sure this site is that secure... Thanks.

[Tom Danzig]

I've used nmap for port scanning (I mean security checks!). It works well, is readily available, free, and detail any found security concerns and tells what to do about them.

[Paul T. Green]

Steven, visited wwdsi.com, found the download area v3.1.3b was not available. It is a commertial site charging for single and multiple servers. My needs are for test purposes only.