[36549] in bugtraq
Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access
daemon@ATHENA.MIT.EDU (Chris Norton)
Fri Sep 17 14:09:30 2004
From: "Chris Norton" <kicktd_list@hotmail.com>
To: "Michael Scheidell" <scheidell@secnap.net>, <bugtraq@securityfocus.com>,
<vulnwatch@vulnwatch.org>, <full-disclosure@lists.netsys.com>
Cc: <vuln@security-corporation.com>, <security-alert@austin.ibm.com>,
<cert@us.ibm.com>
Date: Fri, 17 Sep 2004 10:59:29 -0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Message-ID: <BAY22-DAV12SD35uj5C00029278@hotmail.com>
This "hidden" Administrator account is part of Windows XP and NOT IBM's
porblem.
Every Windows XP system ships and installs with the Administrator and blank
password.
This "hidden" account has been known about for some time, just like Windows
2000
Administrator account is the same way. There are ways to disable or change
the
Administrator name and password or to disable the account completely.
--
Chris Norton
UAT Student Software Engineering Network Defense
