Re: (PM) !root password

Jake Messinger (jake@ams.com)
Thu, 5 Feb 1998 09:24:47 -0600 (CST)

On Wed, 4 Feb 1998, qcislands net gated newsgroup feed wrote:

> Now I find that my new password doesn't work. This leads me to suspect
> that one of the other people *somehow* hacked into the router and changed
> the password ON ME!

They would have had to have done it at the same moment as you.
>
> But how? No one has physical access to the box. They would have had to
> telnet into it. So my question is, could someone have made a backdoor
> into the router OUTSIDE of the !root? AND have been able to change my
> !root access as well? If this is so, then it makes my knees knock.

How do you know someone didnt telnet in or use pmconsole or rlogin to it?

> Please someone tell me how to prevent this from happening on my other two
> routers!

You can turn off telnet ROOT access. and set the # of pmconsole sessions
to 0.

~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~
Jake Messinger ph:713-772-6690 Livingston Var
AMS, Inc. fx:713-774-3498 Medical Billing
8300 Bissonnet #400 jake@ams.com Internet Services
Houston, Texas 77074 www.ams.com/~jake Business Management
~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~

-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.