[15109] in bugtraq
Corel Linux Default Install
daemon@ATHENA.MIT.EDU (j nickson)
Mon May 29 18:10:13 2000
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Message-Id: <3.0.3.32.20000529134945.006ba494@pop.together.net>
Date: Mon, 29 May 2000 13:49:45 -0400
Reply-To: j nickson <jnickson@TOGETHER.NET>
From: j nickson <jnickson@TOGETHER.NET>
X-To: BUGTRAQ@SECURITYFOCUS.COM
To: BUGTRAQ@SECURITYFOCUS.COM
Upon it's release (April) I ordered the minimum Corel Linux.
It's install is great for Windows users, and if they get theiur hands on it
they can get to Netscape on the web in 27 minutes.
If they accept the defaults, they also have a blank root password and
telnet server enabled.
I don't think I have to say much more for this list, but I'll add, and if
they have DSL, ... It is DDOS tra la, tra la, time.
I don't have the bucks to try their other two CDs but I'd expect the same,
wouldn't you?
I e.mailed Corel and got no response, that was about a month ago. It is
time to go public. . .
The thing is it is so totally stupid to have those defaults for an end user
system. I don't understand how they could have been so far off the mark.
J
-------------------------------------------------
James Nickson, j@RoninSG.com voice: 603-256-8055
modem 603-256-8050 facsimile: (802)258-2444
