[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

hidden admin user on every HP MSA2000 G3

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: hidden admin user on every HP MSA2000 G3
From: hpdisclosure@xxxxxxxxxxx
Date: Mon, 13 Dec 2010 15:08:03 +0100

Hi,

i just found out that there is a hidden user on every HP MSA2000 G3 
SAN out there:

username: admin
password: !admin

this user doesnt show up in the user manager, and the password 
cannot be changed - looks like the perfect backdoor for everybody.

Follow-Ups:
- Re: hidden admin user on every HP MSA2000 G3
  - From: nightfighter
- Re: hidden admin user on every HP MSA2000 G3
  - From: Pavel Kankovsky

Prev by Date: Re: Flaw in Microsoft Domain Account Caching Allows Local Workstation Admins to Temporarily Escalate Privileges and Login as Cached Domain Admin Accounts (2010-M$-002)
Next by Date: www.eVuln.com : "url" BBCode XSS in slickMsg
Previous by thread: [CORE-2010-0728] Symantec Intel Handler Service Remote Denial-of-Service
Next by thread: Re: hidden admin user on every HP MSA2000 G3
Index(es):
- Date
- Thread