Think again... IBM thinks its their problem since hiding the admin account is something IBM had to do on purpose.. so, IBM owned it and is fixing it.
-----Original Message----- From: Chris Norton [mailto:[EMAIL PROTECTED] Sent: Friday, September 17, 2004 11:59 AM To: Michael Scheidell; [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access This "hidden" Administrator account is part of Windows XP and NOT IBM's porblem. Every Windows XP system ships and installs with the Administrator and blank password. This "hidden" account has been known about for some time, just like Windows 2000 Administrator account is the same way. There are ways to disable or change the Administrator name and password or to disable the account completely. -- Chris Norton UAT Student Software Engineering Network Defense _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
