OOPs AT&Ts

From: Dan Stephans II <adept_at_mcs.com>
Date: Thu Feb 19 19:18:41 1998

If the machine runs sendmail it would be almost trivial to get get a shell on
the machine; at which point it is near trivial to get root. :)

Cheers,

  Dan

Ward Donald Griffiths III wrote:

> Joe wrote:
>
> > Do you know anything about the AT&T 7300? I picked up one yesterday.
> > It has ver 3.51 onn it but it's looking for a password. Is there a way
> > around that or a default password?
>
> Your best bet is to see whether the "install" account is passworded.
> By default it isn't, and that account can change the root password.
> If there is _any_ account that can login, there are enough setuid
> root components in the user agent that there will probably be a way
> to get root authority. Unless it's a system that was owned by a
> bastard like me who tracked down and "fixed" (like a veterinarian
> with a tomcat) all of the security holes.
> --
> Ward Griffiths
> Dylan: How many years must some people exist,
> before they're allowed to be free?
> WDG3rd: If they "must" exist until they're "allowed",
> they'll never be free.
Received on Thu Feb 19 1998 - 19:18:41 GMT