Obtain the Desktop Edition installation DVD/CD set. Connect to for information. For example you can download an ISO image of the installation CD and then burn your own installation CD. You want the file ubuntu-12.04-desktop-amd64.iso or, if you have a very old server, ubuntu-12.04-desktop-i386.iso. Choose the former to take full advantage of computers based on the AMD64 or EM64T architecture (e.g., Athlon64, Opteron, EM64T Xeon, Core 2). Choose which ever download site works best for you; I have had good luck with -releases/ If you download the ISO image, make sure that you verify the integrity of the downloaded file by comparing the MD5 checksum of the downloaded file with the MD5 checksum listed at or at the download site (e.g. -releases/12.04/MD5SUMS). These instructions will assume you have the ubuntu-12.04.4-desktop-amd64.iso installation CD but installing from the i386, alternate CD, a commercial DVD/CD set or from the net should be essentially identical.
Telnet Server Ubuntu 12.04 Downloadl
Download Zip: https://urlcod.com/2vGhpk
At this point you can login your server from a remote location using SSH (non secure telnet and FTP are not allowed but secure SSH and SFTP are). If you are using "SSH Secure Shell" (now called "SSH Tectia"), a popular SSH client for PC's, you will have to add Keyboard Interactive to the list of "Authentication methods" under "Authentication" if it's not already there.
This is also a good time to check that you can login your server from a remote location using SSH if you have not yet done so (non secure telnet and FTP are not allowed but secure SSH and SFTP are). If you are using "SSH Secure Shell" (now called "SSH Tectia"), a popular SSH client for PC's, you will have to add Keyboard Interactive to the list of "Authentication methods" under "Authentication" if it's not already there.
On port 21, Metasploitable2 runs vsftpd, a popular FTP server. This particular version contains a backdoor that was slipped into the source code by an unknown intruder. The backdoor was quickly identified and removed, but not before quite a few people downloaded it. If a username is sent that ends in the sequence :) [ a happy face ], the backdoored version will open a listening shell on port 6200. We can demonstrate this with telnet or use the Metasploit Framework module to automatically exploit it:
Changes since previous release:Aaro Koskinen: find: implement -samefileAlin Mr: ash.c: speedup $s: substring (no quotes)Andrej Valek: mktemp: add --tmpdir optionAriadne Conill: cpio: add support for --ignore-devno like GNU cpio cpio: add support for --renumber-inodes like GNU cpioBernhard Reutner-Fischer: chrt: silence analyzer warning libarchive: remove duplicate forward declarationDaniel Thau: awk: fix printf %%Denys Vlasenko: config system: move some options closer to relevalnt tool subdirectories libbb.h: fix logic selecting incorrect BB_STRTOOFF for !LFS configs libbb/lineedit: do not escape %^=+}]:, escape ? in tab completion libbb: clarify what bb_mode_string() generates libbb: code shrink bb_parse_mode libbb: code shrink in des encryption, in setup_salt() libbb: code shrink in main() and scripted_main() libbb: eliminate a static data array in bb_mode_string() libbb: make bb_lookup_port() abort on bad port names libbb: reuse "bad port" error message string shell/ash_test/run-all: unset locale/language variables shell: do not read user database for every prompt - only for those which need it shell: enable more tests which are passing now shell: fix arithmentic evaluation of "++7" and such (it is + + 7, i.e. 7) shell: fix parsing of $(( (v)++ + NUM )) shell: fix script's comm field if ENABLE_FEATURE_PREFER_APPLETS=y shell: use more compact SHELL_ASH / HUSH config defines. no code changes ash: LINENO starts from 0 in -c SCRIPT mode ash: eval: Check nflag in evaltree instead of cmdloop ash: eval: Do not cache value of eflag in evaltree ash: eval: Prevent recursive PS4 expansion ash: fix LINENO in functions ash: fix compile breakage in !ENABLE_ASH_ALIAS config ash: introduce bash-like $FUNCNAME ash: parser: Fix alias expansion after heredoc or newlines ash: parser: Fix handling of empty aliases ash: parser: Get rid of PEOA ash: parser: Save and restore heredoclist in expandstr ash: speed up $ too, make it independent of ASH_OPTIMIZE_FOR_SIZE ash: support testsuite for !FEATURE_SUID_CONFIG_QUIET configs ash: use pgetc_eatbnl() in more places, take 3 hush: fix set -n to act immediately, not just after run_list() hush: fix var_LINENO3.tests failure hush: speed up $ too awk: code shrink: avoid duplicate NUL checks and strlen() awk: never return NULL from awk_printf() basename: implement -a and -s SUFFIX blkdiscard: accept -f (force) as no-op bzip: make ftab[] and crc32table[] member arrays of EState, do not allocate chat: hopefully fix infinite spinning on input EOF chmod: correctly report changed modes df: "support" -H as an alias of -h dhcprelay: change two more variables to unsigned find: code shrink -m,a,ctime,min httpd: do not send Last-Modified / ETag / Content-Length for error pages httpd: fix config deps httpd: if range is not specified, correctly fall back to read/write loop httpd: fix compile failure if !FEATURE_HTTPD_RANGES mount: "mount -o rw ...." should not fall back to RO mount mount: with -w, do not fall back to read-only mounts ps: fix -o pid=PID,args interpreting entire "PID,args" as header resize: use tcgetattr(TCSAFLUSH) instead of TCSANOW, closes 13811 shuf: in -i RANGE, accept numbers up to width of pointers shuf: make -i 99999999990-100000000000 work even on 32 bits shuf: with -i LOW-HIGH, do not allow any argv's tar,smemcap: commonalyze checksumming code for tar header tar: prevent malicious archives with enormous long name sizes OOMing the machine tls: "server cert is not RSA" is a fatal error tls: replace "26-bit" P256 code with 32-bit one tls: x25519: code shrink by factoring out common code udhcp: fix build breakage on MIPS udhcpc6: fix udhcp_find_option to actually find DHCP6 options udhcpd: check config file for bad IP ranges (start > end) uudecode: special-case "/dev/stdout", closes 14241 xxd: fix -p -r, closes 13881Dominique Martinet: sed: do not ignore 'g' modifier when match starts with ^Ildar Shaimordanov: wget: allow end-users to customize Content-Type for --post-data and --post-fileIsmael Luceno: less: Ignore -X config: find: Fix mtime/mmin description find: Unify time comparisons find: implement -amin, -atime, -cmin, and -ctimeMartin Kaiser: Makefile.flags: use all cflags for crypt and rt checksMatthew Slowe: timeout: add support for "timeout -k KILL_SECS"Nicholas Niro: ip: added support for setting netns on devicesPeter Korsgaard: libarchive/get_header_ar.c: fix extraction of archives from binutils in deterministic modeRoberto A. Foglietta: ash: add bash-like ERR trap and set -ERon Yorston: libbb: better coreutils compatibility for realpath libbb: code shrink parse_datestr libbb: ensure mode_string is NUL terminated ash: fix ignoreeof option ash: let ignoreeof only affect interactive shells ash: regressions in process substitution ash: stopped jobs should only prevent exit from interactive shell awk: fix read beyond end of buffer cal: implement -m date,touch: allow timezone offsets in dates getopt: code shrink printf: allow 0 as a flag and allow multiple flags rev: correct output for long input lines shuf: speed-up when limited output is requested tar,smemcap: silence compiler warning vi: changes to handling of -c and EXINIT vi: code shrink print_literal() vi: don't right shift empty lines vi: further changes to colon addresses vi: searches in colon commands should wrap vi: support /.exrc wget: implement --post-fileSergey Ponomarev: httpd,telnetd: make default port configurableSören Tempel: ed: align output of read/write commands with POSIX-1.2008 ed: add support for -p command-line option as mandated by POSIX ed: fix current line number for file passed via the command-line ed: align output of read command with POSIX.1-2008Walter Lozano: cmp: add support for -nYU Jincheng: *: generalize "const trick" Make const ptr assign as function call in clang
Changes since previous release:Alex Samorukov: Do not add -lresolv on non-Linux systems Fix bb_setpgrp weapper on the FreeBSD Fix httpd compilation on the FreeBSD Fix klogd applet compilation on the FreeBSD Fix missing "crypt.h" compilation error on the FreeBSD Fix mknod compilation on the FreeBSD Fix ntpd compilcation on the FreeBSD Fix ping build on the FreeBSD Fix traceroute applet on the FreeBSD Fix mail compilation on the FreeBSD Fix for the FEATURE_UTMP on the FreeBSDAlexander Sack: httpd: cgi-bin support for DELETE, PUT, OPTIONS etc methodsAlison Winters: vi: restore 0 offset after :set noXXX command vi: allow writing to another file if this one is readonlyAndre Kalb: udhcpc: Add support to change default interface nameBernd Kuhls: update_passwd: fix context variableChris Renshaw: gcc-version.sh: fix for "invalid number" message during Android NDK buildsDenys Vlasenko: Makefile.flags: add a test for -lrt availability gcc-version.sh: Cygwin fix trylink: do not drop libs from CONFIG_EXTRA_LDLIBS platform.h: fix for Bionic >= 21 not having wait3() libbb.h: inline byteswaps libbb/procps: smaller global data for username/groupname cache libbb: correct the name of is_TERM_dumb() libbb: do not check closedir() in remove_file() libbb: fix '--help' handling in FEATURE_SH_NOFORK=y libbb: introduce and use xgettimeofday(), do not truncate 64-bit time_t in shells decompress_gunzip: simplify ERR_RET bit clearing e2fsprogs/*: remove ioctl calling obfuscation move iterate_on_dir() from e2fsprogs to libbb tls: implement secp256r1 elliptic curve (aka P256) tls: "server did not provide EC key" is fatal tls: get rid of constant-time add/sub operations tls: make constant basepoint9[32] array 8-byte aligned tls: make x25519 key generation code more similar to P256 tls: reduce register pressure in i386 assembly (helps Android to compile) ascii: new applet crc32: new applet shells: do not allow bare "read" in non-bash compat configs ash: fix $unset_var/pattern/repl ash: make a strdup copy of $HISTFILE for line editing ash: match bash behavior for $empty_var/*/repl ash: parser: Fix VSLENGTH parsing with trailing garbage ash: placate -Werror=format-security ash: save Ron's patch from oblivion ash: speed up $v//pattern/repl if !ASH_OPTIMIZE_FOR_SIZE hush: beautify ^D handling to match ash / bash hush: fix bkslash+newline handling and number validation in $NN and $#NN hush: fix handling of "cmd && &" hush: fix handling of \^C and "^C" hush: implement $'str' bashism hush: make LINENO selectable without BASH-COMPAT hush: optimize $var/pattern/repl for trivial patterns awk: after preinc/dec, only allow variable, field ref, array ref, or another preinc/dec awk: allow empty functions with no arguments, disallow function redefinitions awk: disallow break/continue outside of loops awk: do not special-case "delete" awk: do not use a copy of g_progname for node->l.new_progname awk: document which hashes are used at what state (parse/execute) awk: enforce simple builtins' argument number awk: evaluate all, even superfluous function args awk: fix beavior of "exit" without parameter awk: fix corner case in awk_printf awk: fix detection of VAR=VAL arguments awk: fix parsing of expressions such as "v (a)" awk: fix printf "%-10c", 0 awk: fix printf buffer overflow awk: fix use-after-free in "$BIGNUM1 $BIGGERNUM2" concat op awk: free unused parsing structures after parse is done awk: g_buf[] does not need a separate allocation awk: get rid of "move name one char back" trick in next_token() awk: in parsing, remove superfluous NEWLINE check; optimize builtin arg evaluation awk: make ltclass ("last token class") local to next_token() awk: more efficient -f FILE awk: move locals deeper into scopes where they are used, no logic changes awk: move match() code out-of-line awk: rand() could return 1.0, fix this - should be in [0,1) awk: remove custom pool allocator for temporary awk variables awk: remove redundant check awk: replace incorrect use of union in undefined function check (no code changes) awk: restore strdup elision optimization in assignment awk: rewrite "print" logic a bit to make it clearer awk: rollback_token() + chain_group() == chain_until_rbrace() awk: shuffle globals for smaller offsets awk: simplify parsing of function declaration awk: simplify tests for operation class awk: support %F %a %A in printf awk: tighten parsing - disallow extra semicolons awk: tighten rules in action parsing awk: unbreak "cmd" getline awk: unbreak "printf('%c') can output NUL" testcase awk: undo TI_PRINT, it introduced a bug (print with any redirect acting as printf) awk: use static tmpvars in main and exit awk: use smaller regmatch_t arrays, they had 2 elements for no apparent reason awk: use static tmpvars instead of nvalloc(1)ed ones awk: when parsing TC_FUNCTION token, eat its opening '(' awk: when parsing length(), simplify eating of LPAREN base32/64: accept -i "skip bad chars" option (currently in effect unconditionally) bc,dc: make BC_LINE_LENGTH/DC_LINE_LENGTH more compatible with GNU bc,dc: fix length(0) and length(0.000nnn) result bc: ^C on input line exits (unlike ^C during calculations, which does not) bc: code shrink: combine init() and copy() where we can bc: fix for mul overflow in scale calculation in a^b blockdev: support --get/setra chattr: fix "chattr =ae -R FILE" chattr: if IOC_FSGETXATTR fails, do not try IOC_FSSETXATTR chattr,lsattr: share stat error message chattr,lsattr: do not open e.g. device files unless asked directly; do not follow links chattr,lsattr: support -p lsattr: support more ext2 flags cksum: fix handling of read errors cp: implement -n cp: implement -t DIR cpio: fix "cpio -d -p A/B/C" df: POSIXLY_CORRECT sets _default_ scale, -m/-h overrides it df: support -t TYPE dnsd: check that we don't read past packet du: support -b "apparent size" echo: fix !ENABLE_FEATURE_FANCY_ECHO build echo: special case "echo --help": it should not show help text env: implement -0 free: implement -h hexdump: fix error message httpd: avoid extra stat() calls for "GET /dirname/" case httpd: avoid one stat() call for "GET /dirname" case httpd: if no request was given at all, close the socket without generating error page httpd: move proxy check before URL duplication and request type check httpd: no need to strcpy() when we only need to copy one byte httpd: support HEAD requests even in !CGI config inetd: deinline machtime() - gcc gets it wrong ionice: implement -t login: implement LOGIN_TIMEOUT lsof: print fd# too man: fix segfault in "man 1" modprobe: when reading modules.builtin, use basenames of files from it mv: implement -t and -T nslookup: do not print "No answer" for NODATA replies, closes 13006 ntpd: decrease INITIAL_SAMPLES from 4 to 3 ntpd: increase loglevel to 3 for "poll:32s sockets:0 interval:64s" message ntpd: log responses to clients at log level 3 ntpd: remove unused USING_INITIAL_FREQ_ESTIMATION code ntpd: tweak comments ntpd: without INITIAL_FREQ_ESTIMATION code, state variable is not needed too nuke: default to N pmap: fix column width, closes 13431 resume: write offset in /sys/power/resume_offset runsv: code shrink: use single handler function for SIGTERM and SIGCHLD runsv: robustify signal handling - SIGTERM to child between vfork and exec could mess things up shred: implement -s SIZE shred: with -u, unlink file even if it is zero length shuf: simplify check that we have at least one FILE start-stop-daemon: explain -x + -a test svlogd: if processor's stdin can not be opened, do not try ad infinitum switch_root: code shrink - use iterate_on_dir() tail: do not lose the tail of old file if new file (-F) is detected tail: fix typo in variable name tar: simplify addition of --exclude=GLOB to the expansion of -X EXCLFILE taskset: disallow "taskset -p 0" taskset: fix for PID longer than 12 chars taskset: implement -a taskset: use iterate_on_dir() tc: fix for parsing of "dev IFACE" and printing of "class list" tcp/udpsvd: robustify SIGCHLD handling telnetd: give inetd.conf example in --help timeout,top,watch,ping: parse NN.N fractional duration in locales with other separators touch: fix -am touch: fix SEGV if !ENABLE_FEATURE_TOUCH_SUSV3 touch: make FEATURE_TOUCH_NODEREF unconditional touch: switch to using utimensat() and futimens() touch: unbreak -h traceroute: fix compile error due to FreeBSD compat traceroute: fix option parsing udhcp: convert log1s() macro to function udhcp: shrink arpping() udhcpc: clarify bcast/unicast sends in logs, include server ID udhcpc: do not use inet_addr() to parse -r REQ_IP, it's deprecated udhcpc: get rid of client_data.fqdn field udhcpc: ignore zero-length DHCP options udhcpc: improve logs - show offer as it is received udhcpc: include client-id option in DECLINEs, even if it's a custom -x 61:HEX option udhcpc: remove deprecated -H/-h HOSTNAME options (9 years) udhcpc: rename server_addr to server_id, fix id comparison if it's not specified udhcpc: send client-id option in DHCPDECLINE udhcpc[6]: close listening socket more eagerly (e.g. across script runs) udhcpc[6]: do not pass xid around, keep it in client_data.xid udhcpc[6]: fold perform_renew() into its only caller udhcpc[6]: on SIGUSR1, do not go from rebind to renew state udhcpc[6]: remove superfluous "created raw socket" log message udhcpc[6]: untangle "timeout" and "remaining lease"; reduce min lease to 30 seconds udhcpc[6]: when renewing, send 1 packet (not 3), on failure go back to BOUND uniq: support -z unlzma: fix a case where we could read before beginning of buffer unzip: add -t unzip: fix for .zip archives with >4GB file vi: allow regular expressions in ':s' commands vi: move undo_queue_state in globals to other byte-sized members xxd: do not try reading from closed stdin when non-existent file is given xxd: implement -i "C style output" xxd: implement -o DISPLAYOFFSETEicke Herbertz: shell: also do word splitting when -d DELIM is usedHarald van Dijk: tar: exclude files before updating hardlink info listJeremy Lin: wget: allow HTTP 307/308 redirectsJán Sáreník: run-parts: permit dot later in file nameKhem Raj: gen_build_files: Use C locale when calling sed on globbed filesMario Abajo: login: permit change expired password wit PAMMartin Kaiser: Makefile.flags: fix the OS detection for libresolvMaxim Storchak: httpd: fix offset for sendfileNatanael Copa: echo: do not assume that free() leaves errno unmodified lineedit: fix tab completion with equal signPaul Spooren: nslookup: mention QUERY_TYPE SRV build system: use SOURCE_DATE_EPOCH for timestamp if availableRafał Miłecki: dd: support iflag=count_bytesRasmus Villemoes: watchdog: make open-write-close-open functionality a config knobRob Landley: cut: add toybox-compatible options -O OUTSEP, -D, -F LISTRon Yorston: bloat-o-meter: avoid double counting build system: avoid build failure during bisection libbb: code shrink and speed up find_applet_by_name() libbb: code shrink and speed up index_in_strings() libbb: code shrink fgets_str libbb: introduce and use fputs_stdout lineedit: support empty PATH entries in tab completion ash: add process substitution in bash-compatibility mode awk: allow printf('%c') to output NUL, closes 13486 cp,mv: fix -t DIR option cp: fix build failure with long options disabled cryptpw: typo in usage message diff: code shrink nl: ensure '-b n' option displays file content uniq: really support -z vi: ':r' should insert text after current line vi: 'G'/'M' commands move to first visible character vi: 'ZZ' should warn if there are more files to edit vi: :wq/:x should warn if there are more files to edit vi: add expandtab option vi: adjust conditional compilation of modifying_cmds vi: allow 'gg' to specify a range vi: allow 'r' command to be aborted, repeated vi: allow backward search to specify line address vi: allow ctrl-D to reduce indentation vi: allow delimiter in ':s' to be escaped vi: allow line addresses to have an offset vi: allow motion count for change/delete/yank/shift vi: allow repetition count for paragraph motion vi: allow the '.' command to have a repetition count vi: changes to line addresses for colon commands vi: changes to option handling vi: code shrink colon line addresses vi: code shrink motion by paragraph vi: code shrink search commands vi: correct autoindent for 'O' command vi: correctly record deleted characters vi: cursor positioning after whole-line 'y' vi: deal with invalid movements in shift commands vi: detect and warn about invalid line addresses vi: don't move cursor when yanking whole lines vi: don't overwrite existing file vi: expand '%' and '#' in colon commands vi: fix backward search with GNU regex vi: fix buffer overrun; code shrink vi: fix empty line range regression vi: fix range selection by forward character motion vi: fix regex search compilation error vi: fix word operations across line boundaries vi: improve handling of anchored searches vi: improve motion by paragraph vi: improve operations involving paragraph movement vi: improvements to ':read' command vi: improvements to character search within line vi: improvements to range selection vi: improvements to reporting of changes vi: improvements to undo vi: initialise tabstop once not for each file vi: issue a warning on failure to find a character vi: keep autoindent if line isn't empty vi: make autoindent respect expandtab setting vi: make buffer handling more vi-like vi: make context marks more like vi vi: make cursor positioning more vi compatible vi: make de-indentation with ctrl-D more like vim vi: make put commands more like vi vi: make the substitute command more like vi vi: more fixes to range selection by word vi: position cursor on last column of tab vi: preserve state when switching file vi: reject change command when motion fails vi: remember cursor column during vertical motion vi: remove autoindent from otherwise empty lines vi: reset command count when specifying '0' range vi: saving unnamed file in readonly mode vi: stored search pattern applies to ':s' vi: support more commands for range selection vi: up/down motion beyond end of file should fail vi: use basic regular expressions for searchRussell Senior: udhcpc: ignore zero-length DHCP optionsS Harris: cpio: fix sscanf on unterminated buffer vi: fix read outside of text buffer during insertSamuel Sapalski: decompress_gunzip: Fix DoS if gzip is corruptSergey Ponomarev: wget: new option FEATURE_WGET_FTP to enable/disable FTP httpd_post_upload.cgi: use mktemp to avoid $RANDOMSeth David Schoen: udhcpd: don't hardcode treating .0 and .255 speciallySören Tempel: ls: don't output any colors with TERM=dumbXabier Oneca: touch: add SUSv3 options -a and -m touch: fix atime set from reference file touch: remove unneeded GETOPT32 defines touch: prevent usage of -r and -t at once 2ff7e9595c
Comments