Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 5 May 2002 21:16:26 -0700
From:      "Patrick O. Fish" <patrick@pwhsnet.com>
To:        "Jacob Rhoden" <f3z@pop.iprimus.com.au>, <freebsd-questions@freebsd.org>
Subject:   Re: su problem: s/key 94 snosoft2
Message-ID:  <008c01c1f4b4$c9f63110$0300a8c0@zeus>
References:  <005101c1f4b2$9baa4d70$3b12fa80@its.unimelb.edu.au>

next in thread | previous in thread | raw e-mail | index | archive | help
Someone ran a exploit on your box (local user), they must of changed the
root password.

Search some mailing lists for information on the explot.

If you have psyical access to the machine, you can boot into single-user
mode and change it back.

2) To patch your present system:

a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.

# fetch ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-02:23/stdio.patch
# fetch
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-02:23/stdio.patch.asc

b) Execute the following commands as root:

# cd /usr/src
# patch < /path/to/patch

c) Recompile your kernel as described in
http://www.freebsd.org/handbook/kernelconfig.html and reboot the
system.


----- Original Message -----
From: "Jacob Rhoden" <f3z@pop.iprimus.com.au>
To: <freebsd-questions@FreeBSD.ORG>
Sent: Sunday, May 05, 2002 9:00 PM
Subject: su problem: s/key 94 snosoft2


> Hi,
>
> Today when I logged into my box and tried to su to do some admin stuff, I
> got the message 's/key 94 snosoft2' before the password prompt. It now
will
> not accept my password. What could possibly be the problem?
>
> Regards
> Jacob Rhoden
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
>


______________________________________
Scanned and protected by Inflex
Inflex Scanning software Available at
http://pldaniels.com/inflex


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?008c01c1f4b4$c9f63110$0300a8c0>