Re: [Full-disclosure] Undeletable user account.

[trains@xxxxxxxxxxxxxx]

Quoting James Bower <hando311@xxxxxxxxxxx>:

> Hi all, one of my servers has recently been compromised.  No suprise 
> but the hacker created himself a user account.  The problem is that I 
> can't seem to delete the account.  The account is not part of any 
> group.  When you look at the account it and go to Member Of it 
> doesn't show anything.  When I try to delete it as the local admin I

You might find an interesting answer here:

http://neworder.box.sk/newsread.php?newsid=13948

I have used the exploit described therein and it does work as advertised.

t

-------------------------------------------------
Email solutions, MS Exchange alternatives and extrication,
security services, systems integration.
Contact:    services@xxxxxxxxxxxxxx


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/