Re: large scale distributed scan of port tcp 445

From: Deus, Attonbitus (Thorat_private)
Date: Fri Aug 09 2002 - 15:48:00 PDT

  • Next message: nargaat_private: "strange apache log entry"

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1
    
    At 01:56 PM 8/9/2002, Gary Flynn wrote:
    
    >Interesting story. Seems there are a lot of 2k/XP systems out there
    >without adequate Administrator passwords. No administrator password
    >means instant access to the C$ share...i.e. entire hard drive including
    >startup folders. Even a weak password makes the system vulnerable
    >as the Administrator isn't locked on unsuccessful password guesses
    >as shipped.
    
    Well, no Admin password in XP means no network access via that account.  By 
    default, XP limits accounts with no password to console access only.
    
    AD
    
    -----BEGIN PGP SIGNATURE-----
    Version: PGP 7.1
    
    iQA/AwUBPVRGoIhsmyD15h5gEQJyhwCfXkIbIWXa6WqJL+UgMFmfjNj1LJgAoMIR
    ZoLqDCqxTcYJvrD/nDbq0e+F
    =mb7A
    -----END PGP SIGNATURE-----
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Mon Aug 12 2002 - 08:32:59 PDT