[2952] in bugtraq
HP/UX 10.01 Remote Administration accoun
daemon@ATHENA.MIT.EDU (Matt Barrie SYD)
Tue Jul 16 22:49:54 1996
Date: Tue, 16 Jul 1996 22:10:42 -0600
Reply-To: Bugtraq List <BUGTRAQ@NETSPACE.ORG>
From: Matt Barrie SYD <Matt_Barrie@oti.com>
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@NETSPACE.ORG>
Yep, under hpux 10.01 sam adds the following to the passwordfile on
a system to be remotely administered:
sam_exec:SA/pD6P1YPzaE:0:1::/home/sam_exec:/usr/bin/sh
This was accomplished by adding localhost to the machines to be
administered using its ip number (it recognised the hostname as itself).
I tried "Yosemite" and "yosemite" but it looks like they've changed
the remote password. I don't have crack on me now, but I'm sure someone
on this list will be able to figure out what it is.
matt
