Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
[Full-Disclosure] RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access
From: Michael Scheidell (scheidellsecnap.net)
Date: Sat Sep 18 2004 - 10:39:56 CDT
XP HOME??? I am not talking about XP home.
From: Shawn McMahon [mailto:smcmahoneiv.com]
Sent: Saturday, September 18, 2004 10:07 AM
To: Michael Wilson, Contractor
Cc: Chris Norton; Michael Scheidell; bugtraqsecurityfocus.com;
Subject: Re: Vulnerability in IBM Windows XP: default hidden
Administrator account allows local Administrator access
On Fri, Sep 17, 2004 at 03:08:34PM -0500, Michael Wilson, Contractor
> It is most likely the Vendor Install Customization that has caused
> issue, as true enough, most vendor installs force you to pick an
> administrator password before using the system. If the account is
> then it is definitely IBM's doing as I have never seen a Windows
> where the administrator account could not be seen under the accounts
Averatec laptop installs of XP Home have it hidden; you have to boot in
Safe Mode to add a password.
The documentation that specifies this is a Microsoft product, so I
suspect it's the same with other installs of Home, but I have only left
the packaged install of XP Home on one machine ever, so I am not at all
sure of this.
Shawn McMahon | Let's set the record straight. There is no argument
EIV Consulting | over the choice between peace and war, but there is
UNIX and Linux | only one guaranteed way you can have peace - and
http://www.eiv.com | can have it in the next second - surrender. -
Full-Disclosure - We believe in it.