Bugtraq mailing list archives
Re: Wireless networks/Default Admin username security problem in Croatia
From: Denis Jedig <seclists () syneticon de>
Date: Sat, 05 Feb 2005 09:13:00 +0100
Radoslav Dejanović wrote:
- since there's just a dozen of default administrator usernames and none of them has a password associated with it, it is a child's play to hook on the wireless network and connect to user's computer
Please consider that at least in the default config of Windows XP professional, the system does not allow remote connections which are authenticated by an account with a blank password. This especially includes the entire SMB stuff (RPC, file shares, named pipes) and remote desktop connections (Blank Password Restrictions).
References: http://www.microsoft.com/resources/documentation/windows/xp/all/reskit/en-us/prdp_log_tyry.asp http://www.microsoft.com/technet/prodtechnol/winxppro/evaluate/xpsec.mspx Regards, Denis Jedig syneticon GbR
Current thread:
- Wireless networks/Default Admin username security problem in Croatia Radoslav Dejanović (Feb 04)
- Re: Wireless networks/Default Admin username security problem in Croatia Denis Jedig (Feb 05)