HP-UX 11i Version 2 Release Notes (October 2003)

Security
HP-UX Secure Shell
Chapter 7
181
• HP-UX IPFilter version A.03.05.06 Release Note
For FAQs and forums, go to the IT Resource Center at http://itrc.hp.com.
Obsolescence
Not applicable.
HP-UX Secure Shell
HP-UX Secure Shell A.03.10, based on OpenSSH 3.1p1, provides a secure channel for
remote communication by transparently encrypting network traffic. HP-UX Secure Shell
uses hashing to ensure data integrity and supports several authentication methods.
Summary of Change
HP-UX Secure Shell is a new product in the HP-UX 11i Operating Environments.
HP-UX Secure Shell A.03.10 is not vulnerable to the following CERT Advisories:
• CA-2002-24: Trojan Horse OpenSSH Distribution
• CA-2002-23: Multiple Vulnerabilities in OpenSSL
• CA-2002-18: OpenSSH Vulnerabilities in Challenge Response
• CA-2002-07: Double Free Bug in zlib Compression Library
Impact
HP supports HP-UX Secure Shell at no additional cost to customers with HP-UX support
agreements. HP-UX Secure Shell is a fully tested HP product. HP built HP-UX Secure
Shell A.03.10 with the following libraries:
• zlib v1.1.4
• OpenSSL v0.9.6c
• TCP Wrappers v7.6
• Kerberos-4 v1.1.1
Compatibility
There are no compatibility issues.
Performance
There are no performance issues.