Re: Root Password

Re: Root Password

[Pete Young]

> hehe... well, that will work to, I guess... :-)

Well, it did for me with an Indy running 5.3 .

As an aside, Irix as shipped has to be the most simple unix variant to
break that I've ever come across. Why on earth does all that stuff have
to run setuid root? Never thought I'd be advocating a switch to Linux
on security grounds, but there you go!

Regards

Pete

  ____________________________________________________________________
  Pete Young          pete@alien.bt.co.uk        Phone +44 1473 642740
      "Just another crouton, floating on the bouillabaisse of life"

Re: Root Password

[Alistair Lambie]

Pete Young wrote:
> 
> > hehe... well, that will work to, I guess... :-)
> 
> Well, it did for me with an Indy running 5.3 .
> 
> As an aside, Irix as shipped has to be the most simple unix variant to
> break that I've ever come across. Why on earth does all that stuff have
> to run setuid root? Never thought I'd be advocating a switch to Linux
> on security grounds, but there you go!
> 

I think that may be a bit unfair.  Irix 5.3 is real old (Nov 17, 1994)
and while it had many security issues I think a lot of other vendors
probably did as well in that time frame.  There are a lot of security
patches available for Irix 5.3 and I'm guessing they are probably not
loaded on the machine you are using.  These patches are made available
to everyone regardless of whether you have a support contract or not. 
You can find information at
http://www.sgi.com/Support/security/security.html  If you find something
that is not fixed you can report it at that site as well.  

Cheers, Alistair

-- 
Alistair Lambie                                alambie@csd.sgi.com
SGI Global Product Support            SGI Voicemail/VNET: 234-1455
Level 5, Cigna House,                                M/S: INZ-3780
PO Box 24 093,                                  Ph: +64-4-494 6325
40 Mercer St, Wellington,                      Fax: +64-4-494 6321
New Zealand                                 Mobile: +64-21-635 262

Root Password

[William Holmes]

[-- Attachment #1: Type: text/plain, Size: 244 bytes --]

I just got a O2 system and the root password is set and I have no idea what it is. System runnig fine with IRIX 6.3 but no CD'S. I know this doesn't have any thing to do with LINUX but can some one help?

Thanks In Advance

William Holmes

[-- Attachment #2: Type: text/html, Size: 660 bytes --]

Re: Root Password

[Todd M. Shrider]

You'll need the system cd's, or at least the first cd, to reset the root
passwd. When the system starts, press escape to go into the maintenance
menu and then choose install system software. (Were not actually going to
install the system software). At the meno choose Administration (opetion
13 I believe) and then type chroot

This will put you at a prompt so you can type passwd and give a new root
passwd. As far as I know this is the only way to change things...


--
Todd M. Shrider			Coder Emeritus
Kaleidoscope Inc.		The Diner Inc.
tshrider@kascope.com		(317)581-6378

       I degaussed my girlfriend and I'm 
       just not attracted to her anymore. 

On Sat, 21 Aug 1999, William Holmes wrote:

> I just got a O2 system and the root password is set and I have no idea what it is. System runnig fine with IRIX 6.3 but no CD'S. I know this doesn't have any thing to do with LINUX but can some one help?
> 
> Thanks In Advance
> 
> William Holmes
> 

Re: Root Password

[brett]

not having a system cd for an old Indigo I went over to rootshell.com and
got a root exploit for the system.

b



On Sat, 21 Aug 1999, Todd M. Shrider wrote:

> 
> You'll need the system cd's, or at least the first cd, to reset the root
> passwd. When the system starts, press escape to go into the maintenance
> menu and then choose install system software. (Were not actually going to
> install the system software). At the meno choose Administration (opetion
> 13 I believe) and then type chroot
> 
> This will put you at a prompt so you can type passwd and give a new root
> passwd. As far as I know this is the only way to change things...
> 
> 
> --
> Todd M. Shrider			Coder Emeritus
> Kaleidoscope Inc.		The Diner Inc.
> tshrider@kascope.com		(317)581-6378
> 
>        I degaussed my girlfriend and I'm 
>        just not attracted to her anymore. 
> 
> On Sat, 21 Aug 1999, William Holmes wrote:
> 
> > I just got a O2 system and the root password is set and I have no idea what it is. System runnig fine with IRIX 6.3 but no CD'S. I know this doesn't have any thing to do with LINUX but can some one help?
> > 
> > Thanks In Advance
> > 
> > William Holmes
> > 
> 
> 

Re: Root Password

[Todd M. Shrider]

hehe... well, that will work to, I guess... :-)


--
Todd M. Shrider			Coder Emeritus
Kaleidoscope Inc.		The Diner Inc.
tshrider@kascope.com		(317)581-6378

       I degaussed my girlfriend and I'm 
       just not attracted to her anymore. 

On Sat, 21 Aug 1999, brett wrote:

> not having a system cd for an old Indigo I went over to rootshell.com and
> got a root exploit for the system.
> 
> b
> 
> 
> 
> On Sat, 21 Aug 1999, Todd M. Shrider wrote:
> 
> > 
> > You'll need the system cd's, or at least the first cd, to reset the root
> > passwd. When the system starts, press escape to go into the maintenance
> > menu and then choose install system software. (Were not actually going to
> > install the system software). At the meno choose Administration (opetion
> > 13 I believe) and then type chroot
> > 
> > This will put you at a prompt so you can type passwd and give a new root
> > passwd. As far as I know this is the only way to change things...
> > 
> > 
> > --
> > Todd M. Shrider			Coder Emeritus
> > Kaleidoscope Inc.		The Diner Inc.
> > tshrider@kascope.com		(317)581-6378
> > 
> >        I degaussed my girlfriend and I'm 
> >        just not attracted to her anymore. 
> > 
> > On Sat, 21 Aug 1999, William Holmes wrote:
> > 
> > > I just got a O2 system and the root password is set and I have no idea what it is. System runnig fine with IRIX 6.3 but no CD'S. I know this doesn't have any thing to do with LINUX but can some one help?
> > > 
> > > Thanks In Advance
> > > 
> > > William Holmes
> > > 
> > 
> > 
> 

Root Password

[Raj Mathur]

I normally wouldn't reply to an HTML message, but this is a special
case.

Run the attached exploit to get a root shell, set TERM and edit
/etc/passwd or /etc/shadow and remove the password.

[Exploit suppresed]

Regards,

-- Raju

>>>>> "William" == William Holmes <palsoft@earthlink.net> writes:

    William> [1 <text/plain; iso-8859-1 (quoted-printable)>] I just
    William> got a O2 system and the root password is set and I have
    William> no idea what it is. System runnig fine with IRIX 6.3 but
    William> no CD'S. I know this doesn't have any thing to do with
    William> LINUX but can some one help?

    William> Thanks In Advance

    William> William Holmes [2 <text/html; iso-8859-1
    William> (quoted-printable)>]