RE: Nokia IP 330 Firewall Appliance

From: Paige, Randall (rpaigeat_private)
Date: Tue May 14 2002 - 12:15:39 PDT

  • Next message: Michael.Thorpat_private: "Penetrating a Thinkpad"

    Look at the script overpw at the /etc.
    This script checks for single user mode and
    that you are logging in under the console.
    You can create your own script and mount the drive
    in write mode and accomplish the same thing.
    
    But once again, if you have logged in as admin, you
    are 'root'.
    
    -----Original Message-----
    From: Enno Rey [mailto:erey@security-academy.de]
    Sent: Monday, May 13, 2002 11:14 PM
    To: pentest.nospam13@web-cities.net; pen-testat_private
    Subject: Re: Nokia IP 330 Firewall Appliance
    
    
    Hi,
    
    afaik you can't even touch the 'root' account on the nokia boxes. You just
    have to work as admin which is (nearly?) equivalent... to reset admin
    account, see procedure in
    
    http://msgs.securepoint.com/cgi-bin/get/fw1-0203/541/2.html
    
    [describes the procedure for a 440, shall work on a 330, too]. But ... one
    thing I don't get... being admin you're definitely able to reconfigure the
    box... if not there's some other problem... feel free to mail me off-list to
    investigate further...
    
    HTH,
    
    Enno Rey
    
    Enno Rey Netzwerke GmbH - Zaehringerstr. 46 -69115 Heidelberg
    Tel. +49 6221 480390 - Fax +49 6221 419008 - Mobil +49 173 6745902
    www.ernw.de PGP 585F B0B9 F429 35EF 73A4  BC33 8F4B A629 C181 2EF1
    
    ----- Original Message -----
    From: <pentest.nospam13@web-cities.net>
    To: <pen-testat_private>
    Sent: Monday, May 13, 2002 10:44 PM
    Subject: Nokia IP 330 Firewall Appliance
    
    
    > Anyone know how to change root password on an IP330?  I was able to social
    > engineer my
    > way to Admin (thanks nokia support).  I still need to get root password to
    > reconfigure the box.
    > I do not have access to the nokia website ;(   but I do have physical
    access
    > to the box.
    >
    > Anyhelp would be appreciated.. this is a non-profit group and I am doing
    > a freebie for them and really don't have any more time to keep messing
    with
    > it.
    >
    >
    > Regards,
    > Dr Bado.
    >
    >
    >
    > --------------------------------------------------------------------------
    --
    > This list is provided by the SecurityFocus Security Intelligence Alert
    (SIA)
    > Service. For more information on SecurityFocus' SIA service which
    > automatically alerts you to the latest security vulnerabilities please
    see:
    > https://alerts.securityfocus.com/
    >
    >
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Wed May 15 2002 - 15:34:35 PDT