Re: [[cobalt-users] Server Hacked?]

[Luc Schiltz <becher@xxxxxx>]

>> On this same note - someone grabbed our passwd file on the RaQ1 and has
>> started hacking sites one by one as they crack passwords... moving
> everything
>> to RaQ3i's ASAP!

> Hello all,

> how is it possible for anybody to get the passwd file form a RaQ ? Is this
> a
> RaQ1 problem or can this also happen on a RaQ2 ?

raq1 doesn't have any shadowed passwords (very! big security hole)
and anybody with telnet can grep the /etc/passwd file 
raq3 got shadowed passwords

> Manuel

luc


> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-users