On Tue, 29 Jul 2003, John Lampe wrote: | this isn't a knock against HP-UX (well...yes it is), but HPUX boxes go down | quicker than a M$ box (though not as quick as SCO ;-) ) I've often wondered | why the published security researchers don't have more stuff on HPUX....
Colonel Panic of SOD (Scripters of Doom, a moniker for a pseudonym) used to have a "Bug of the Week" page strictly for HP/UX local exploits. IIRC, he stopped because he got bored coming up with new things all the time. I don't know why other people don't release new vulnerabilities for it, but being a former HP/UX admin I might have a clue: the only people that play with HP/UX are admins of HP/UX farms, and we would rather NOT have to deal with a "bug of the week" until we found someone else to take responsibility for the servers :) Additionally, there aren't too many HP/UX servers hanging out in the wild, so many script kiddies probably aren't even aware of their existence. (Same with old Sequent Dynix boxen, which could have had a "bug of the day" page if someone was bored enough) .nhoJ
