Re: Windows 2000 installation process weakness

2000-02-23 Thread Stephane Aubert
Hello, As a lot of people asked me information on the unsecure win2k pro installation process, we wish to bring further information on this vulnerability. All these tests have been made and checked with Denis Ducamp and Alain Thivillon, 2 serious security experts. What we have done : 1.

Windows 2000 installation process weakness

2000-02-15 Thread Stephane Aubert
Hi ! During the installation process of Windows 2000 professionnal anyone can connect to the ADMIN$ share as ADMINISTRATOR whithout any password. Verification : % ./smbclient WINDOZE\\ADMIN$ -I xxx.yyy.zzz.ttt -U 'administrator' -d 0 -N Unable to open configuration file