RE: HP3000

From: Rouland, Chris (ISSAtlanta) (CRoulandat_private)
Date: Mon Jul 23 2001 - 09:20:39 PDT

  • Next message: Chris Barber: "enumerate NT/Win2k users from a linux machine"

    The ?MDL-'DL-1'+2 local admin exploit, and other HP3000 security issues are
    enumerating pretty well in this doc:
    
    http://www.adager.com/VeSoft/SecurityAndYou.html
    
    -Chris
    
      
    
    -----Original Message-----
    From: mhtat_private [mailto:mhtat_private] 
    Sent: Monday, July 23, 2001 1:21 AM
    To: Rouland, Chris (ISSAtlanta); 'Gary Warner'; pen-testat_private
    Subject: RE: HP3000
    
    
    http://docs.hp.com/mpeix/pdf/32650-90471.pdf - User's Guide to MPE/iX 
    Security for 900 series HP 3000 Computer Systems (HP Part Number:
    32650-90471) http://docs.hp.com/cgi-bin/doc3k/B3265090473.13434/1 Manager's
    Guide to 
    MPE/iX Security
    
    hope this helps.. :)
    
    /cheers
    
    At 03:26 PM 07/22/2001 -0400, Rouland, Chris (ISSAtlanta) wrote:
    >I would highly recommend the book "Thoughts and discourses on HP 3000 
    >software"  by Eugene Volokh.  Also check out the audit products at 
    >www.vesoft.net .
    >
    >
    >-Chris
    >
    >-
    >Chris Rouland
    >Director / X-Force
    >Internet Security Systems, Inc.
    >
    >
    >-----Original Message-----
    >From: Gary Warner [mailto:garat_private]
    >Sent: Wednesday, July 18, 2001 5:46 PM
    >To: pen-testat_private
    >Subject: HP3000
    >
    >
    >Need a "self-audit" checklist to share with a customer who has an 
    >HP3000. Does anyone have some good links to share with me?
    >
    >
    >Thank you,
    >
    >Gary Warner
    >HarshTruth Security
    >
    >
    >-----------------------------------------------------------------------
    >-----
    >This list is provided by the SecurityFocus Security Intelligence Alert
    (SIA)
    >Service For more information on SecurityFocus' SIA service which
    >automatically alerts you to the latest security vulnerabilities please see:
    >https://alerts.securityfocus.com/
    >
    >-----------------------------------------------------------------------
    >-----
    >This list is provided by the SecurityFocus Security Intelligence Alert
    (SIA)
    >Service. For more information on SecurityFocus' SIA service which
    >automatically alerts you to the latest security vulnerabilities please see:
    >https://alerts.securityfocus.com/
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Mon Jul 23 2001 - 12:28:49 PDT