Path: utzoo!attcan!uunet!wuarchive!zaphod.mps.ohio-state.edu!usc!snorkelwacker!bloom-beacon!eru!luth!sunic!tut!santra!mcsun!unido!fauern!tumuc!guug!ott
From: ott@guug.UUCP (Joachim Ott)
Newsgroups: comp.unix.i386
Subject: Re: rlogin fails as root on ISC 386/ix
Summary: here is how you can do it
Keywords: rlogin, ISC
Message-ID: <39@guug.UUCP>
Date: 30 Dec 89 23:02:32 GMT
References: <1940@lamont.ldgo.columbia.edu>
Sender: root@guug.UUCP
Organization: GUUG e.V., Munich, W. Germany
Lines: 9

In article <1940@lamont.ldgo.columbia.edu>, fritzz@lamont.ldgo.columbia.edu (fritz zaucker) writes:
> Hi,
(rest deleted)
i have done this once for microport unix: find out the address of the string
'not on system console' in the data segment (use 'hd' and a calculator);
find out where this address is pushl'ed (to printf) - use 'dis'; shortly
after the printf-call is the exit-call - replace it with nop's (write your
own program). After this you can login as root from anywhere.
J. Ott