Re: FTP and SSH access question

From: Kevin Buhr (buhr_at_telus.net)
Date: 12/02/04 

Date: Wed, 01 Dec 2004 23:00:26 GMT

c3dy8911r@yahoo.com (c3dy8911r) writes:
>
> Does anyone have any ideas?

Sure, several.

First:

You say port 20 is closed. I assume you mean it's blocked by a
firewall rule, but you've neglected to mention in which direction
(and, for a given direction, whether it's blocked based on the source
or destination port).

In the extreme case, where all traffic to or from port 20 in either
direction is blocked, it should be sufficient to use an FTP client in
passive mode. It shouldn't touch port 20.

Or second:

SSH to the remote server as this normal user, "cd" to a writable
directory, and "ftp localhost" as root to GET the root-readable file
into that directory. Now, "cat file" should work.

Or third:

Since you can upload as root, upload a "passwd" file with a blank or
known root password. Now, SSH as user and "su" or "sudo" to root. 

-- 
Kevin <buhr@telus.net>

Relevant Pages

  • Re: Hardening a Solaris system.
    ... > I know files that execute with root permissions by normal users (e.g. ... > I've set up a web server, running Apache, so are thinking about what I ... thing to leave enabled in here might be a backup port. ... there are security steps here. ...
    (comp.unix.solaris)
  • Re: Hardening a Solaris system.
    ... > I know files that execute with root permissions by normal users (e.g. ... > I've set up a web server, running Apache, so are thinking about what I ... thing to leave enabled in here might be a backup port. ... there are security steps here. ...
    (comp.security.unix)
  • Re: Safe practices
    ... Assume I'm logged in to my Linux system as a normal user. ... System is stand-alone, non-networked, but connected to internet via ... Someone might try to get to you through a port used for other purposes ... Your 'su root' at your console:- You are in a different thread to the rest ...
    (alt.os.linux)
  • A new model for ports and kernel security?
    ... why do we have this requirement that only root ... made to a low port to be "secure". ... clearly it has outlived its usefulness as a "security" feature. ... So I would like to propose the following improvement to kernel security ...
    (Linux-Kernel)
  • Re: FTP and SSH access question
    ... You say port 20 is closed. ... SSH to the remote server as this normal user, ... and "ftp localhost" as root to GET the root-readable file ... Since you can upload as root, upload a "passwd" file with a blank or ...
    (comp.security.misc)
Quantcast