HPUX Security help


 
Thread Tools Search this Thread
Operating Systems HP-UX HPUX Security help
# 1  
Old 02-03-2004
HPUX Security help

Hi everyone!

I need your help.
When i run ipcs -m -a for display shared memory status i see an entry with key 0xdeadbeef:

IPC status from /dev/kmem as of Tue Feb 3 15:55:14 2004
T ID KEY MODE OWNER GROUP CREATOR CGROUP NATTCH SEGSZ CPID LPID ATIME DTIME CTIME
m 3 0xdeadbeef --rw-rw-rw- root root root root 2 237420 1099 1814 15:40:50 no-entry 8:45:58

I fear my box has been "successfully hacked" ...
What should I do then ?

Any idea help will be very welcomed...
# 2  
Old 02-03-2004
Quote:
2.16: What is deadbeef?

"When running the debugger (dbx), you may have wondered what the 'deadbeef' is you occasionally see in registers. Do note, that 0xdeadbeef is a hexadecimal number that also happens to be some kind of word (the RS/6000 was built in Texas!), and this hexadecimal number is simply put into unused registers at some time, probably during program startup."

- http://www.faqs.org/faqs/aix-faq/part4/section-12.html
So it doesn't appear to be a problem. No sites came up saying it's a virus or the result of a hacker. And when you think about it, all the letters are hexadecimal ... A-F. Smilie
# 3  
Old 02-03-2004
It was created by pid 1099 and last used by pid 1814. What are those?

ps -fp 1099,1814


I agree "deadbeef" just means that someone has a sense of humor.
# 4  
Old 02-05-2004
thanks

I feel a bit safe now,
thanks a lot guys...
Login or Register to Ask a Question

Previous Thread | Next Thread

2 More Discussions You Might Find Interesting

1. HP-UX

pwage-hpux-T for Trusted HPUX servers

I'm sharing this in case anybody needs it. Modified from the original solaris pwage script. This modified hpux script will check /etc/password file on hpux trusted systems search /tcb and grep the required u_succhg field. Calculate days to expiry and notify users via email. original solaris... (2 Replies)
Discussion started by: sparcguy
2 Replies

2. Shell Programming and Scripting

Need Script to Use CPUs on a HPUX server to simulate Workload Manager on HPUX.

I am running HPUX and using WLM (workload manager). I want to write a script to fork CPUs to basically take CPUs from other servers to show that the communication is working and CPU licensing is working. Basically, I want to build a script that will use up CPU on a server. Any ideas? (2 Replies)
Discussion started by: cpolikowsky
2 Replies
Login or Register to Ask a Question