OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 2nd quarter (Apr-Jun) 1995: Re: Obtaining NIS domainname from Gatorbox

Re: Obtaining NIS domainname from Gatorbox

Bob Rahe (bobhobbes.dtcc.edu)
Mon, 10 Apr 1995 12:42:28 EDT 

+------ On Apr 10,  9:12, Ken Weaverling wrote:
|>This may be an obscure hole, but it got us and still bothers me.
|>
|>Gatorboxes are shipped without a user password set. Once connected to your
|>net, it is easy to telnet to one of these things and log in with ANY id
|>iff there is no user password set. 
|>
|>The user account can't change anything, but can look at really 
|>interesting things. For example, if you have the GatorShare software
|>running using NIS authentication, it will freely tell you what the
|>NIS domainname is.

  Maybe a good reason to join the crowd and not run NIS?  Seems like that
thing causes mucho problems.  That's the second one you've mentioned in two
days, I think.

-- 
-------------------------------------------------------------------------
|Bob Rahe, Delaware Tech&Comm College | AIDS, Drugs, Abortion: -        |
|Computer Center, Dover, Delaware     |  - Don't liberals just kill you?|
|Internet: bobhobbes.dtcc.edu        |Save whales; and kill babies?    |
-------------------------------------------------------------------------