Re: [cobalt-users] Locked Out Of Cobalt Server

["Brian Curtis" <admin@xxxxxxxxxxx>]

----- Original Message -----
From: "Chad Levin" <chadl@xxxxxxxxxxxxxxx>

> I figured that out for myself. I need to know how to get it back though.
>
> Any help is very much appreciated,
>
> Chad

Well, if you've been following the list lately, you'll know that there are
quite a few exploits currently usable against non-updated Cobalt machines.

If the guy did in fact 'hijack' your server by changing the root and/or
admin passwords, using one of these exploits to your benefit might be the
only 'quick and dirty' solution.  Can you login as a normal user with shell
access?

If he completely screwed up the passwd/shadow file (either on accident or
purpose), well ...  You might be able to get around it by mounting the drive
into a standard Linux box and making your repairs.

I believe there are a few security admins on this list who should be able to
help you, for a fee of course.  Searching the archives and/or making a
request for service on-list might help.

Jeff L., you're good at hacking apart Cobalts. :)  Any ideas/offers?

--
BC