Re: Nokia IP 330 Firewall Appliance

From: Mike Brentlinger (mdbrentlinger@hotmail.com)
Date: Tue May 14 2002 - 09:07:48 EDT


Resolution 692
How do I change the admin password when it is lost or unknown?

IPSO (Operating system), System Configuration
for version: 3.0 And Later

last update: 03/27/2000 11:03:23
This resolution describes how to delete the admin password.

If you are running IPSO version 3.1.3 or earlier on an IP650 or on an IP330,
please contact support and ask about Internal Resolution 1961 - How to
remove config and password if /etc/overpw fails.
SOLUTION
You must have local serial console access to the unit to perform this
procedure. Keyboard and monitor directly connected to the machine will not
display the "boot:" line, which means you will not be able to perform this
procedure.

1) Boot up in single user mode: To do this reboot or power cycle the
machine, When you see the line " boot: " you must enter "-s" before it goes
into multiuser mode. (you have about 10 seconds)

* on a ip330 or ip650 you need to type boot -s at the BOOTMGR prompt*
BOOTMGR[0]> boot wd0 /image/current/kernel -s

2) After it boots, it will ask you "Enter pathname of shell or RETURN for
sh:", press Enter key.

3) Type "/etc/overpw" in the # prompt. It will ask if you want continue,
type "y".

In IPSO 3.1.3 systems and earlier, it will ask you to put a floppy disk into
the floppy drive to make sure you have physical access to the box. Put a
floppy disk into the floppy drive and press Enter key. IPSO 3.1.4 and later
does not ask this question.

4) The admin password defaults to no password for admin. Continue to boot to
multiuser mode.

5) Re-config the passwd as usual, in Voyager.

----Original Message Follows----
From: <pentest.nospam13@web-cities.net>
To: <pen-test@securityfocus.com>
Subject: Nokia IP 330 Firewall Appliance
Date: Mon, 13 May 2002 13:44:12 -0700

Anyone know how to change root password on an IP330? I was able to social
engineer my
way to Admin (thanks nokia support). I still need to get root password to
reconfigure the box.
I do not have access to the nokia website ;( but I do have physical access
to the box.

Anyhelp would be appreciated.. this is a non-profit group and I am doing
a freebie for them and really don't have any more time to keep messing with
it.

Regards,
Dr Bado.

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/

_________________________________________________________________
Join the world’s largest e-mail service with MSN Hotmail.
http://www.hotmail.com

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:21 EDT