Re: [Full-Disclosure] Re: IRCXpro 1.0 - Clear local and default remote admin passwords

• Previous message: OpenPKG: "[OpenPKG-SA-2003.030] OpenPKG Security Advisory (ghostscript)"
• In reply to: IRCXpro Support: "[Full-Disclosure] Re: IRCXpro 1.0 - Clear local and default remote admin passwords"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> 2. Remote default admin enabled
> Our Reply: The user is prompted before the server starts for the first
time
> to set their own Operator Name and Password during the Initial Wizard for
> their administrator account.  (See initial.gif file attachment)
>
Look in your .gif and you will note
user:admin
password:password

with a "next" prompt. 90% of users will select "next" blindly.

Donnie Werner
http://exploitlabs.com
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

• Next message: morning_wood: "Re: [Full-Disclosure] Re: IRCXpro 1.0 - Clear local and default remote admin passwords"
• Previous message: OpenPKG: "[OpenPKG-SA-2003.030] OpenPKG Security Advisory (ghostscript)"
• In reply to: IRCXpro Support: "[Full-Disclosure] Re: IRCXpro 1.0 - Clear local and default remote admin passwords"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Jun 03 2003 - 11:11:22 PDT