NetNews Usenet Archive 1992 #27/NN_1992_27.iso/spool/comp/sys/novell/9679

Text File | 1992-11-19 | 2.1 KB | 45 lines

Newsgroups: comp.sys.novell
Path: sparky!uunet!nevada.edu!jimi!taj.cs.unlv.edu!maniac
From: [e-mail] (Eric J. Schwertfeger)
Subject: Re: Hack.exe
Message-ID: <[e-mail]>
Sender: [e-mail] (News User)
Reply-To: [e-mail] (Eric J. Schwertfeger)
Organization: UNLV Computer Science and Electrical Engineering
References: <[e-mail]> <[e-mail]>
Date: Fri, 20 Nov 92 04:44:04 GMT
Lines: 32

In article <[e-mail]>, [e-mail] (Richard Low) writes:
) > I agree!  I wrote one of the two NLM's that can be used to break into a
) > Novell Server.  There is no plug for this, other than securing your
) > console so the NLM can't be loaded (via direct, RCONSOLE, or XCONSOLE).
) >
) > Want me to talk details?  I provided source code to a lot of people on
) > CompuServe a while ago.  It's really quite simple.
) >
) > More to follow if requested...
) > --
) > Mark Pietrasanta - [e-mail]
) > * * * * * * * * *
)
) The basic premise behind server security is physically securing the box.
) Getting into a server by loading an NLM is pretty simple, you just have to
) keep prying hands off your server.  I mean, anybody can cause damage by
) just pulling the plug!

Very true, if the box isn't locked where I can't get to it, I can get into
any Novell 3.11 file server.  I have yet to see a security system that
would prevent me from getting supervisor access if I really wanted it, and
didn't care about discovery.  If you remove the STARTUP.NCF from the boot
disk, you can then boot the server, load a set-password NLM from a floppy
disk, then reenable the startup.NCF.  Trust me, I've had to do that for
clients before on supposedly secure servers.  Had loads of fun once with
a fileserver that had a password-boot system, but the password had been
forgotten (never trust a user to document stuff like this).  I had to take
that one back to the office, and it's a good thing the case didn't have a lock,
because otherwise I would have had to damage it to get the HD out.

--
Eric J. Schwertfeger, [e-mail]