From: LiNERROR (linerrorstx.rr.com)
Date: Fri Jul 11 2003 - 01:57:18 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

open running an audit on one of my networks Retina discovered a system with
what appeared to be multiple administrator accounts.
snip ---
Accounts: User: Administrator Pass: rotartsinimdA - Account password
reverse of account
Accounts: User: Administrator Pass: Administrator - Account password same
as account
Accounts: User: Administrator Pass: - Account with no password
snip ---
However the system shows no evidence of these accounts in the user
manager... BUT they EXIST!
i can connect to the system using my specified Account and password... AND
the three above.

I've never seen this before and was wondering if anyone knew anything than
might help me figureout how badly this system has been compromised...

----------------------------------------------------------------------------
Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the
world's premier technical IT security event! 10 tracks, 15 training sessions,
1,800 delegates from 30 nations including all of the top experts, from CSO's to
"underground" security specialists. See for yourself what the buzz is about!
Early-bird registration ends July 3. This event will sell out. www.blackhat.com
----------------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]