full-disclosure - Undeletable user account.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20060104142540.1y5802o97e68s08g@mail.doctorunix.com>
Date: Wed Jan  4 20:26:00 2006
From: trains at doctorunix.com (trains@...torunix.com)
Subject: Undeletable user account.

Quoting James Bower <hando311@...mail.com>:

> Hi all, one of my servers has recently been compromised.  No suprise 
> but the hacker created himself a user account.  The problem is that I 
> can't seem to delete the account.  The account is not part of any 
> group.  When you look at the account it and go to Member Of it 
> doesn't show anything.  When I try to delete it as the local admin I

You might find an interesting answer here:

http://neworder.box.sk/newsread.php?newsid=13948

I have used the exploit described therein and it does work as advertised.

t

-------------------------------------------------
Email solutions, MS Exchange alternatives and extrication,
security services, systems integration.
Contact:    services@...torunix.com