RE: [cobalt-users] Unable To TELNET in to RAQ3 as admin or anyother user!!!

["Mark Remde" <mark@xxxxxxxxxxxxxxxxxxxxxx>]

Too late - Got me too!

The whole /bin directory has gone!

Do you intend to restore from CD or try to rebuild? If a rebuild, how? Is there any way of getting root access without telnet? rsh and rlogin seem to be denied too.

Just a thought, is this just a destructive hack, or is an exploit still in place? If so, perhaps we could use it ourselves to get back into our own box?

Mark

-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of David Conorozzo
Sent: 07 February 2001 21:56
To: admin@xxxxxxxx; cobalt-users@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-users] Unable To TELNET in to RAQ3 as admin or
anyother user!!!


You have been hacked.  I have been too.  To confirm this, what happens when you try to telnet in?  Do you see something about /bin/login?  When you FTP in, is your FTP server the wrong one (was PROFTP replaced by a different FTP server)?  This is what happened to me... I urge everyone to install the BIND update immediately.  I have spent all day fixing web sites (by moving them to a different server).  I will spend the next 2 days getting them all back.

David Conorozzo
PC Assistance, Inc.


>>> John M Troher <admin@xxxxxxxx> 02/07/01 12:11PM >>>
All the sudden I can not telnet into my RAQ3 as admin or any other user.
password always fails with login incorrect error. I am using the right
password!!!!

I can still get into the web interface as admin but that is all.

Any ideas?

John

_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx 
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users

_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users