Re: [cobalt-users] More Cobalt Hacks

[Chris Adams <cmadams@xxxxxxxxxx>]

Once upon a time, Dan <dan@xxxxxxxxxxxxx> said:
> > However, it can be enabled by any user with a one line .htaccess file
> > (as can CGI).  With that, you can also gain shell access.  On the RaQ2
> > and RaQ3, all users can gain telnet access as their own user, and site
> > administrators can gain access as user httpd as well.
> > 
> When I try to telnet in as one of my virtual site administrators:

All you have to do is setup a CGI that will accept a connection.  One
way would be to upload an xterm binary to your RaQ account, run an X
server on your desktop, and have a CGI open up an xterm to your desktop.
Or you could have a custom written telnet server listening on a
different port.

And virtually anything you can do from a shell you can also do from a
CGI.
-- 
Chris Adams <cmadams@xxxxxxxxxx>
Systems and Network Administrator - HiWAAY Information Services
I don't speak for anybody but myself - that's enough trouble.