hpux 11.3i vulnerabilities

[apple]

dear HPUX gurus,
would appreciate your experience in what kind of vulnerabilities found in 11.3i. we would like to improvise our hardening checklist.
hope to hear from you. thank you

[Steven E. Protter]

Shalom,

Without patching, any OS including 11.31 has hundreds of vulnerabilities.

To prevent that the first thing you do after OS install is the latest bi-annual patch update.

There are buffer overflow issues with applications.

There are DNS poison issues with BIND

Too numerous to list.

There is also security_patch_check which will check your system for vulnerabilities and assist you in closing them.

http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B6849AA

SEP

[Keith Buck]

https://www.hp.com/go/swa

Steven's link is to Bastille, which will help you proactively harden the OS. For patching, you probably want Software Assistant, which replaces security_patch_check. I recommend using both.

-Keith