> 2. Remote default admin enabled
> Our Reply: The user is prompted before the server starts for the first
time
> to set their own Operator Name and Password during the Initial Wizard for
> their administrator account.  (See initial.gif file attachment)
>
Look in your .gif and you will note
user:admin
password:password

with a "next" prompt. 90% of users will select "next" blindly.

Donnie Werner
http://exploitlabs.com
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
  • Re... Darren Reed
    • ... IRCXpro Support
      • ... Darren Reed
      • ... Michael Osten
        • ... Darren Reed
      • ... morning_wood
      • ... Васил Колев
        • ... Shawn McMahon
  • RE... Mads Tans�
    • ... Darren Reed
  • morning_wood

Reply via email to