Re: HP-UX Explotation/Repair/Info scripts

[nlawson () statler csc calpoly edu (Nathan Lawson)]

> I Will be soon changing some SunOS platforms to HP-UX and I feel like lost from the security point view wich I always 
> s
> tudied on the Sun machines.
> I would like if possible any kind of explotaion scripts , detailed information, etc about existing HP bugs. HP folks 
> sa
> y not to worry "HP-UX is the most secure", I don't beleive them...
> Any help will be very appreciated..

Try formatting for something around 80 columns. 

Not to be too rude, but the "lameness" meter twitches around ten each time
you post or send a message.  I am sure most people ignore your idiocy on 
comp.security.unix, but it's getting very annoying.

To answer your question, no, HSUX is not the most secure nor the most insecure.
I have seen numerous root holes (i.e. vhe_u_mnt), remote holes (i.e. mountd
bugs), and the like.  With 10.0 purporting to be more 'standard' like other
systems and depending on NFS and NIS, there will surely be a new variety of
holes to examine.  Every Unix has its own variety of holes and there is no one
set of holes that covers them all.

The way you ask questions is at the same level of a skr1pt hacker.  If you
were a hacker instead of a 'security professional', I can imagine you sitting
on IRC saying "D0od!#$@ GiMMe SuMma DoZe AyCH-PeE skR1pZ!"  I don't think this
is the best way to get help with your questions, so instead of bursting into
a forum with dumb questions, read the list for a while and search the archives
for past answers to those with the same inclination as yourself.

Have a nice day.
-- 
Nathan Lawson     \    Never let your schooling interfere with your education.
FreeBSD-current    \  "The steady state of disks is full."  -- Ken Thompson
---------------------