Vulnerability list

[KINGSLEY_1]

Dear Sirs,

Can you help me with the link that can give the list of all vulnerabilities and security risk for HP-UX 11.23?

Thanks.

kingsley

[Steven E. Protter · Accepted solution]

Shalom,

There is no one step that can do this.

There is a utility, available from http://software.hp.com called security_patch_check that will let you know what security patches are defined by HP as critical.

Also available on the same site is Bastille, which requires a Perl5 admin from the same site. Bastille is pretty comprehensive at scanning a system, making simple security changes and recommending implementation of more complex steps.

Also necessary is monitoring ITRC for security updates.

I wish there was an easy one stop solution, but security doesn't work like that.

SEP

[James R. Ferguson]

Hi:

If you haven't already started to use the Software Assistant Tool (SWA) you certainly need to do so:

www.hp.com/go/swa

"...(SWA) minimizes the time required by administrators to analyze the software on HP-UX systems, and is the HP-recommended utility for maintaining currency with HP-published security bulletins and recommended patch levels for HP-UX 11i software."

Regards!

...JRF...

[Laurent Menase]

you means like:
http://www11.itrc.hp.com/service/james/search.do?mode=text&searchString=HP-UX+11.23&submit1=Recherche+%C2%BB&searchCrit=allwords&docType=SecurityBulletins&dateSearchType=lastXdays&dateRange=all&startDateYear=1999&startDateMonth=0&startDateDay=1&endDateYear=2010&endDateMonth=5&endDateDay=23&resPerPage=20&sortCrit=rank

[P Muralidhar Kini]

Hi KINGSLEY,

Yes, there is not one single step or document where you can get this info.
You need to keep monitoring the ITRC for security updates.
You need to pay attention to the Patches that are released, rated as
critical and so on. Also find out what fixes are there in the patches and
decide whether that is important from your business need point of view.
If yes then you have to apply those patches.

Regards,
Murali

[Kapil Jha]

To initiate a subscription to receive future HP Security Bulletins via Email:
http://h30046.www3.hp.com/driverAlertProfile.php?regioncode=NA&langcode=USENG&jumpid=in_SC-GEN__driverITRC&topiccode=ITRC

On the web page: ITRC security bulletins and patch sign-up
Under Step1: your ITRC security bulletins and patches
-check ALL categories for which alerts are required and continue.
Under Step2: your ITRC operating systems
-verify your operating system selections are checked and save.


BR.
Kapil+