linux local r00ts ?

[Radar_mX]

hi alll

I tried many local r00ts for a 2.6.18.8 kernal there are fake one called c7.3 caused DOS for hours , is it possible to reset the current user password using the terminal without knowing the current password ?

OS : debian

http://th3-0utl4ws.com/localroot/" onclick="window.open(this.href);return false; <-- local root exploits

any ideas ?

[bad_brain]

in Debian there is not just one 2.6.18 kernel, there are multiple ones with different patch levels, like 2.6.18-debian1 or 2.6.18-debian2...so it's not possible to say if an exploit for 2.6.18 works or not without checking the changelogs to see if the vulnerability has been patched or not...

I assume you mean a non-root account, in this case I see no way if you don't have access to the GRUB boot menu...if you have access to it you could boot into "single mode" where you should be root user automatically without having to enter a password, and from there you can change any passwords you like.

[Radar_mX]

yes
kernal :2.6.18.8-linode22
Novemeber update

[bad_brain]

um, but that's definitely not an original Debian kernel...

[Radar_mX]

it is hard to exploit

I think from http://www.linode.com" onclick="window.open(this.href);return false;

someone says hecouldn't root it

http://www.linode.com/forums/archive/o_ ... ry_it.html" onclick="window.open(this.href);return false;

actually I don't have physicall access , I access remote server tring to gain root I tried a lot of methods FAILED