Prev: mountd - No default domain
Next: Ora
From: kristian.hermansen on 20 Jun 2005 14:43 I am a security researcher looking for older Solaris 8 and 9 CDs. Calling Sun and trying to order them, I was told that they would not sell me any of their "retired" versions of software. Apparantly, they retired the Solaris 8 (2/00) original CD release in May of last year. The same is true of the original Solaris 9 (5/02) release CD. I have searched eBay, Amazon, and many websites which claim to have them online -- but turn out to be bogus when I call them up to verify. I am looking to purchase the two Solaris releases mentioned above on CD or in a media kit (new or used, doesn't matter), or download the ISOs directly. Can anyone point me to a place where I can find these Solaris releases? You will be greatly rewarded, because I have a few guys that say they *might* be able to get them for me in a few weeks time, and at an exhorbitant amount! Name your prices and shoot me some emails, or point me to the ISOs (I already own them). Much appreciated, thanks :-) Kristian Hermansen
From: Rich Teer on 20 Jun 2005 14:59 On Mon, 20 Jun 2005 kristian.hermansen(a)gmail.com wrote: > I am a security researcher looking for older Solaris 8 and 9 CDs. > Calling Sun and trying to order them, I was told that they would not > sell me any of their "retired" versions of software. Apparantly, they > retired the Solaris 8 (2/00) original CD release in May of last year. > The same is true of the original Solaris 9 (5/02) release CD. I have Is there a reason why more recent updates of those OSes won't do? -- Rich Teer, SCNA, SCSA, OpenSolaris CAB member President, Rite Online Inc. Voice: +1 (250) 979-1638 URL: http://www.rite-group.com/rich
From: kristian.hermansen on 20 Jun 2005 15:36 Yes -- the reason why I don't want the more updated versions is because they are already patched! I want the vulnerabilities to be wide open in the system :-) I am currently working on an Intrusion Prevention System that will detect incoming security threats "on the fly", and stop them, even if your system is vulnerable and unpatched. I want to see if the IPS will stop known exploits against some unpatched Solaris services... Kristian Hermansen
From: Bill Waddington on 20 Jun 2005 18:21 On Mon, 20 Jun 2005 14:59:05 -0700, Michael Vilain <vilain(a)spamcop.net> wrote: >In article <1119296164.645606.145010(a)g14g2000cwa.googlegroups.com>, > kristian.hermansen(a)gmail.com wrote: > >> Yes -- the reason why I don't want the more updated versions is because >> they are already patched! I want the vulnerabilities to be wide open >> in the system :-) I am currently working on an Intrusion Prevention >> System that will detect incoming security threats "on the fly", and >> stop them, even if your system is vulnerable and unpatched. I want to >> see if the IPS will stop known exploits against some unpatched Solaris >> services... >> >> Kristian Hermansen > >Depending on where you're located, some technical bookstores carry a >computer software section. A local used bookstore here in Mountain >View, CA has _lots_ of releases of SPARC Solaris. Short of a plane ride >to Silicon Valley, try looking in your area for such resources or keep >checking eBay. You don't really have that many other options, I'm >afraid. > Hmmm, Looking in my downloads/images bin, I see: s8_sparc_02.04 s9_sparc_u2 s8_x86_02.02 s9_x86_u2 s9_x86_u5 Hypothetically supposing I wanted to toss the zips on a couple of DVDs and _give_ them to you, does either one of us get in trouble re RTU issues? Rich and Michael, feel free to chime in. As usual, I'm clueless. Bill
From: Rich Teer on 20 Jun 2005 18:30
On Mon, 20 Jun 2005, Bill Waddington wrote: > Looking in my downloads/images bin, I see: > > s8_sparc_02.04 > s9_sparc_u2 > s8_x86_02.02 > s9_x86_u2 > s9_x86_u5 > > Hypothetically supposing I wanted to toss the zips on a couple of > DVDs and _give_ them to you, does either one of us get in trouble > re RTU issues? With Solaris 8, I think the situatrion is simple: it came with a $0 RTU for <= 8 CPUs. S9 wasn't so generous--it didn't come with a free RTU, IIRC. So, S8 should be safe, S9 less so. But are Sun's lawyers REALLY gonna chase the OP for the license fee? I don't think so... -- Rich Teer, SCNA, SCSA, OpenSolaris CAB member President, Rite Online Inc. Voice: +1 (250) 979-1638 URL: http://www.rite-group.com/rich |