This group is about Linux security, but in response (a bit off the actual question) I will point to some public sources of Compaq Tru64 UNIX doc and patches, for everybody's reference. The Security Guide of Tru64 UNIX 5.1A (the latest version docs contains checklists that are largely applicable to 4.0D as well) http://www.tru64unix.compaq.com/docs/ http://www.tru64unix.compaq.com/docs/base_doc/DOCUMENTATION/V51A_HTML/ARH95D TE/TITLE.HTM The Best Practices site contains references on how to configure a Tru64 UNIX system security. http://www.tru64unix.compaq.com/docs/best_practices/ Check the public patch site for patches. The patch kits, similar to patch clusters, contains security patches. Dok for patches: http://www.tru64unix.compaq.com/docs/patch/40D/bl16/HTML/TITLE.HTM Patches http://ftp1.support.compaq.com/public/dunix/v4.0d/ Regards, Med vanlig halsning Inge Frisk, PS, Compaq -----Original Message----- From: digital [mailto:digital@rootshell.be] Sent: den 12 november 2001 06:54 To: security-discuss@linuxsecurity.com Subject: Digital Unix V4.0D vulnerabilites Hi gang, I am a Unix Admin. Well Digital Unix distrobution has been in my interest for sometime now. I am pleased to say I got clearance to run it. We have all our software and machines needed to run this OS. We will be running "Digital Unix V4.0D". I realize there are more up to date versions and distrobutions, but this is just plane fun for me. But first I need to secure it as much as I can. Our BIGGEST security risk is "Remote Login" it will be running a telnet server, and the connection address is publicied on our site (for various reasions). What are some of the well known exploits assumming NO username / password. Thanks everyone, John Unix Admin(lover) ------------------------------------------------------------------------ To unsubscribe email security-discuss-request@linuxsecurity.com with "unsubscribe" in the subject of the message. ------------------------------------------------------------------------ To unsubscribe email security-discuss-request@linuxsecurity.com with "unsubscribe" in the subject of the message.