🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #422

Re: FW-1 / Nokia Password Problem

#422
From: Mike Oxlong
Date: Sat, 03 Nov 2001 22:31
102 lines
3917 bytes
Hi Greg,

Thank you for your help, I will give it a go in the morning!

Regards,

Mike


"Greg Hennessy" <cmkrnl@cix.compulink.co.uk> wrote in message
news:2jg8utkaf2mhp798gihku3oqgb3kr0kvp5@4ax.com...
> On Sat, 03 Nov 2001 16:07:27 GMT, Jacques Bourdeau
> <J_Bourdeau@videotron.ca> wrote:
>
> >Hi,
> >
> >for a Unix system, its always possible : remove the hard disk from the
> >locked device, insert it in a Unix under your control, boot this
> >controlled
> >Unix, mount the HD containing the locked Unix and change / remove the
> >root
> >password or promote a user with a known password to UID 0.
>
>
> Its pretty obvious Jacques that you have never worked with Nokias to make
a
> statement like that.
>
> Password Recovery on an IP series is trivial once one has access to the
> console.
>
> Abridged from resolution 692 on http://support.nokia.com/
>
> Interrupt the boot process and boot it single user by issuing "boot -s" at
> the BOOTMGR> Prompt.
>
> run /etc/overpw to blank out the old password.
>
> reboot the box et voila. IIRC 3.4 is marginally more involved as it
doesn't
> like blank passwords. But that trivial compared to ripping the hard disk
> out.
>
> Note to Mike : Get yourself access to the Nokia KB PDQ, its very
> comprehensive & will aid you in your quest.
> Whilsts you are in single user mode on the module 'rm /active/config' also
> to get rid of any existing config.
>
>
>
> >
> >For FW-1 module, it can be more difficult. Some application (like Entrust
> >and surely FW-1) do their own authentication with their own UID/PSSWD
> >database. Having full control or not on the underlaying OS is useless for
> >doing authentication on these application.
>
> Wrong!
>
>
> >
> >I do not know exactly how FW-1 do, but its can be unrecoverable.
>
> You haven't worked with FW-1 either given that its trivial to add a new
> superuser to the module using "fwm -a" from the shell as documented here
>
> http://www.phoneboy.com/faq/0099.html
>
>
>
> greg
>
>
>
>
>
>
>
>
> >
> >Jacques Bourdeau
> >
> >>>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<<
> >
> >On 11/3/01, 8:23:09 AM, "Mike Oxlong" <nospam@nospam.com> wrote regarding
> >FW-1 / Nokia Password Problem:
> >
> >
> >> I have been asked to look at a repossessed Nokia IP330 running
Firewall-1
> >> but do not have the login/passwords for the Unix Administrator and also
> >for
> >> FW-1.
> >
> >> I am a Cisco person but don't know my way around Unix or FW-1 very
well,
> >is
> >> there a password recovery process that I can use?
> >
> >> Thanks in advance,
> >
> >> Mike
>
Technical Details
Message-ID: <9s1r7g$rev$1@newsg4.svr.pol.co.uk>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!newsfeeds.belnet.be!news.belnet.be!colt.net!diablo.theplanet.net!news.theplanet.net!not-for-mail
References: <9s0r3s$763$1@newsg4.svr.pol.co.uk> <20011103.16072700@E2.> <2jg8utkaf2mhp798gihku3oqgb3kr0kvp5@4ax.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,910cbdc6b677c933
X-Google-Attributes: gidf922c,public
X-Google-Thread: 1136e5,910cbdc6b677c933
X-Google-Attributes: gid1136e5,public
X-Google-Thread: fc559,910cbdc6b677c933
X-Google-Attributes: gidfc559,public
X-Google-ArrivalTime: 2001-11-03 14:31:13 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!newsfeeds.belnet.be!news.belnet.be!colt.net!diablo.theplanet.net!news.theplanet.net!not-for-mail
From: "Mike Oxlong" <nospam@nospam.com>
Newsgroups: comp.security.firewalls,cp.products.firewall-1,cp.users.discussion
Subject: Re: FW-1 / Nokia Password Problem
Date: Sat, 3 Nov 2001 22:31:12 -0000
Lines: 104
Message-ID: <9s1r7g$rev$1@newsg4.svr.pol.co.uk>
References: <9s0r3s$763$1@newsg4.svr.pol.co.uk> <20011103.16072700@E2.> <2jg8utkaf2mhp798gihku3oqgb3kr0kvp5@4ax.com>
NNTP-Posting-Host: modem-2.articuno.dialup.pol.co.uk
X-Trace: newsg4.svr.pol.co.uk 1004826672 28127 217.135.26.2 (3 Nov 2001 22:31:12 GMT)
NNTP-Posting-Date: 3 Nov 2001 22:31:12 GMT
X-Complaints-To: abuse@theplanet.net
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000