HP-UX Patching Capabilities

Vendors typically stop producing patches for end-of-life operating systems, even for critical issues. If you are faced with this or a similar issue, we can provide key fixes and patches that may not be available for end-of-life versions which have reached what HP calls "Support without Sustaining Engineering". These patches can be provided for key services such as Secure Shell, which usually cannot be disabled as a workaround for a critical flaw. We have the expertise to create a limited set of new base packages for HP-UX, so long as a code-fix is freely available, to cover these issues and provide a real fix to older HP-UX systems.

Here is a list of issues for which PARSEC can provide internally sourced non-HP replacement patches for critical vulnerabilities. Note that this list covers (more than) all default HP-UX network services:

• Secure Shell
• Network Time Protocol
• Telnet, rsh, rlogin, and rexec (though customers should really migrate these to SSH, since these are unencrypted services anyway)
• Talk, ntalk, and writesrv
• Sendmail
• SNMP
• inetd and its internal services

We specifically cannot provide patches for these situations:

• Kernel patches
• Most local-only privilege escalation issues
• HP or 3rd party drivers
• HP-UX-specific proprietary software where no open source analog or public source code exists.