RE: [cobalt-developers] Re: server Hack(Newbie)

[Mat Schaffer <mschaffer@xxxxxxxxxxxxxxxxxxx>]

> -----Original Message-----
> From: Colm Brazel [mailto:cbweb@xxxxxx]
> I got message server is hacked and open on a certain port.
> first time using
> telnet I connect to the server, but the login screen echoes repeats
> multiples of the login code I enter, though when I enter in
> passowrd for the
> server it echoes back fine. Anyone explain this to me?
Sounds like you have a local echo turned on in your telnet client.  Look
around the options for whatever program you're using to telnet into the
machine.  If it's windows telnet it will be one of the menu options.
Not sure which one though.  The server will echo for you.  But what's
happening is that your client is echoing and so is the server.  Which it
why you see everything twice, and see the password (which shouldn't
echo).

> Presumable when I get this sorted I got to apply the following: 1st
> question, how do I run commands as root?
> Presumably, tell me if I`m wrong, I enter:
>
> su (enter this)
> wget http://amail.co.uk/cobalt/UK2-RaQ3-Repair-3.pkg(enter this)
> and so on
>
> -->until finally<--
> /sbin/shutdown -r now(enter this)
You're good.  That first "su" command (stands for Super User) logs you
in as root.  All commands from that point on will have root access to
the system, until you use "exit".
It looks like the commands are good.  I'm guessing a cobalt tech gave
them to you.  To enhance your knowledge, I'll explain the commands one
by one below, so you know what's going on.  I'm not sure what the patch
you used is, but what you did is at least valid.

>> su (if you are not root)
(Super User) this command will prompt for the root password, and then
allow super user (ie., root) access to the system until "exit" is issued

>> wget http://amail.co.uk/cobalt/UK2-RaQ3-Repair-3.pkg
(Web Get) This command grabs a file directly from a web server's
directory structure.  This file is available at
http://amail.co.uk/cobalt/UK2-RaQ3-Repair-3.pkg through a web browser as
well (but since cobalt machines don't have much in the way of a web
browser, or monitor, you do it this way)

>> /usr/local/sbin/cobalt_upgrade UK2-RaQ3-Repair-3.pkg
cobalt_upgrade is the command-line way to install .pkg updates.  It
essentially does the same thing as the "update" or "install" procedure
in your UI.

>> sleep 5s
sleep tells the server to do nothing for # seconds.  This isn't necesary
unless you're typing really really fast :)  (not really), or running the
commands within a script (really).  You can wait 5 seconds before the
next command and achieve the same result.

>> rm UK2-RaQ3-Repair-3.pkg
rm = ReMove.  This deletes the UK2-RaQ3-Repair-3.pkg file that you
obtained using the wget command.

>> /sbin/shutdown -r now
shutdown does just that.  It shutsdown the server.  the "-r" means
shutdown, then reboot.  and the "now" is when to do it (linux systems
can be told to shut down at a particular time; say 6pm each day, or
something)  But in this case we don't want to wait, so "now"

Thas it!
-Mat