RE: [[cobalt-users] Server Hacked?]

[Manuel Schmitt <manitu@xxxxxxxxxxxxxx>]

> Are your shell commands limited?

Yes, but not a lot. Some commands like traceroute or dig don't exit, but
all other things are there.

> Are you only allowed to move around within your own
> directory structure?

No, I can access almost any directories. I could also get the mbox file of
a friend (I told him that I would be trying this).


> I'm curious which types of security stuff they have you
> limited to.  Allowing that many telnet accesses seems like
> they could just be throwing caution to the wind.

I don't think that the sysadmins are throwing caution to the wind.
I just got the /etc/passwd file but there are NO real users in it except
for root and some common ones. A /etc/shadow file does not exist.

BUT there is a file /etc/pwb.db which I can access but it seems not do
contain valuable information. There is also a /etc/spwd.db which only root
has access to.

Hope this helps.

Manuel