Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
From: David Sánchez Martín (dsancheze2000.es)
Date: Mon May 11 2009 - 08:55:04 CDT
Is not that a simple design decission? (truly brain-dead, but a
> -----Mensaje original-----
> De: MustLive [mailto:mustlivewebsecurity.com.ua]
> Enviado el: domingo, 10 de mayo de 2009 15:23
> Para: bugtraqsecurityfocus.com
> Asunto: Insufficient Authentication vulnerability in Acer notebooks
> Hello SecurityFocus!
> I want to warn you about vulnerability in Acer notebooks.
> It's Insufficient Authentication vulnerability. Which I found
> 28.04.2009 in
> two my notebooks. At these notebooks Windows XP Home Rus is
> using, in case
> of other OS the vulnerability can be also present.
> In Windows XP Home in default administrator's account
> “Administrator” there
> is empty password. And it does not set equal to password of
> first admin,
> when admin account is creating during first start of notebook
> (as it happens
> during installation of Windows XP). So with physical access
> to notebook,
> anybody can enter into the system with administrator's rights.
> Vulnerable models of notebooks: Acer TravelMate 2313LC, Acer
> 2413LC and potentially other models.
> I mentioned about these vulnerability at my site
> Best wishes & regards,
> Administrator of Websecurity web site
- application/x-pkcs7-signature attachment: smime.p7s