Sounds dodgy, unless it's a HP-UX security feature. Make sure that the "su" command you are running really is "su", and not a shell script that captures passwords. ie:
[tt]
file su # Check if it's a binary.
more su # If it came back as a text file.
[/tt]
If you have another HP-UX system check the size of the binary on the other system against the existing one.
Hope this helps, and sorry for being Mr. Paranoid... [sig]<p> Andy Bold<br><a href=mailto: > </a><br><a href= > </a><br>"I've probably made most of the mistakes already, so hopefully you won't have to..." Me, most days.[/sig]