RE: Nokia IP 330 Firewall Appliance

From: Paige, Randall (rpaige@verisign.com)
Date: Tue May 14 2002 - 15:15:39 EDT


Look at the script overpw at the /etc.
This script checks for single user mode and
that you are logging in under the console.
You can create your own script and mount the drive
in write mode and accomplish the same thing.

But once again, if you have logged in as admin, you
are 'root'.

-----Original Message-----
From: Enno Rey [mailto:erey@security-academy.de]
Sent: Monday, May 13, 2002 11:14 PM
To: pentest.nospam13@web-cities.net; pen-test@securityfocus.com
Subject: Re: Nokia IP 330 Firewall Appliance

Hi,

afaik you can't even touch the 'root' account on the nokia boxes. You just
have to work as admin which is (nearly?) equivalent... to reset admin
account, see procedure in

http://msgs.securepoint.com/cgi-bin/get/fw1-0203/541/2.html

[describes the procedure for a 440, shall work on a 330, too]. But ... one
thing I don't get... being admin you're definitely able to reconfigure the
box... if not there's some other problem... feel free to mail me off-list to
investigate further...

HTH,

Enno Rey

Enno Rey Netzwerke GmbH - Zaehringerstr. 46 -69115 Heidelberg
Tel. +49 6221 480390 - Fax +49 6221 419008 - Mobil +49 173 6745902
www.ernw.de PGP 585F B0B9 F429 35EF 73A4 BC33 8F4B A629 C181 2EF1

----- Original Message -----
From: <pentest.nospam13@web-cities.net>
To: <pen-test@securityfocus.com>
Sent: Monday, May 13, 2002 10:44 PM
Subject: Nokia IP 330 Firewall Appliance

> Anyone know how to change root password on an IP330? I was able to social
> engineer my
> way to Admin (thanks nokia support). I still need to get root password to
> reconfigure the box.
> I do not have access to the nokia website ;( but I do have physical
access
> to the box.
>
> Anyhelp would be appreciated.. this is a non-profit group and I am doing
> a freebie for them and really don't have any more time to keep messing
with
> it.
>
>
> Regards,
> Dr Bado.
>
>
>
> --------------------------------------------------------------------------

--
> This list is provided by the SecurityFocus Security Intelligence Alert
(SIA)
> Service. For more information on SecurityFocus' SIA service which
> automatically alerts you to the latest security vulnerabilities please
see:
> https://alerts.securityfocus.com/
>
>
----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/
----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:21 EDT