LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 11-20-2004, 03:56 PM   #1
jdruin
Member
 
Registered: Jul 2003
Location: Louisville aka Derby City
Distribution: WinXP SP2 and SP3, W2K Server, Ubuntu
Posts: 313

Rep: Reputation: 30
Can root access be gained from regular user account without password?


I have a computer at school that has an incorrect OpenMosix line in inittab I need to change. Someone I gave the root password to (i know, i know) changed it to something else. How can I gain access without having physical access to the box? I have a valid user logon and password but I could not change the inittab file with those lowly permissions. I am able to SSH into the box with no problem.
 
Old 11-20-2004, 06:24 PM   #2
wolfe2554
Member
 
Registered: Apr 2003
Location: denver co
Distribution: redhat9
Posts: 156

Rep: Reputation: 30
there is no way. You need to have a rescue floppy and access to the physical system to change the /etc/password file. Other wise you be screwed. OH well, by the way your story is highly unlikely as no one ever gives root permissions to anyone on a net box with out serious considerations toward that persons character and integrity. If you need to give someone root permissions in order for them to access files or install programs you could use sudoers. More than likely you are a student with aspirations to root user and can not get access to the server room. Too bad for you. If you really were root user could get physical access to the box for a rescue.
wolfe
 
Old 11-21-2004, 05:36 PM   #3
Krugger
Member
 
Registered: Oct 2004
Posts: 229

Rep: Reputation: 30
Hmm, so an incorrect line in inittab...

First would be to phone to the person who changed the password, but as that isn't an option for you

try perl -e 'exec "\x65\x63\x68\x6f\x20\x72\x6f\x6f\x74\x23\x3b\x73\x6c\x65\x65\x70\x20\x35\x3b\x20\x65\x63\x68\x6f\x2 0\x4c\x6f\x67\x6f\x75\x74\x0a"'

for a glimps of root.
 
Old 11-21-2004, 09:28 PM   #4
jdruin
Member
 
Registered: Jul 2003
Location: Louisville aka Derby City
Distribution: WinXP SP2 and SP3, W2K Server, Ubuntu
Posts: 313

Original Poster
Rep: Reputation: 30
Well, acutally I can email a professor who can talk to the person for me. I just didnt want to wait that long as the holiday will mean I need to wait til a week from now. I want to work on the problem right away as the semester is coming to an end. But I digress, thanks for the info all.

I will drive to school and access the server directly next week.

Thanks you for the info Krugger, however I cannot run that code because I do not know what it does.
 
Old 11-22-2004, 05:19 AM   #5
Krugger
Member
 
Registered: Oct 2004
Posts: 229

Rep: Reputation: 30
It's just a small practical joke.

Not running unknown code is good.
 
Old 11-22-2004, 10:20 AM   #6
bignerd
Member
 
Registered: Nov 2004
Distribution: FC1, Gentoo, Mdk 8.1, RH7-8-9, Knoppix, Zuarus rom 3.13
Posts: 98

Rep: Reputation: 15
Quote:
however I cannot run that code because I do not know what it does. [/B]
translates out to echo root#;sleep 5; echo Logout

No idea if it works (as a joke). Didn't run it.

-b
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
No access to NTFS mounts for regular user account lowpro2k3 Slackware 5 10-23-2005 05:21 PM
Can unlock screen with root password in my user account - want to change this sm1 Linux - Newbie 2 07-24-2005 05:54 AM
can not access directory from user account - only root walterbyrd Linux - General 1 03-04-2005 11:23 PM
Can Access Sites with root but not user account Obelus Linux - Networking 4 12-21-2003 03:28 PM
can't login to regular user account luchobucho Linux - General 2 10-27-2003 05:11 AM


All times are GMT -5. The time now is 01:30 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration