[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: hidden admin user on every HP MSA2000 G3

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: hidden admin user on every HP MSA2000 G3
From: nightfighter@xxxxxxxxxxx
Date: Mon, 13 Dec 2010 20:55:03 +0100

 Can anyone confirm this vulnerabilty?
I don't have a MSA for testing at the moment.

> Hi,
>
> i just found out that there is a hidden user on every HP MSA2000 G3 
> SAN out there:
>
> username: admin
> password: !admin
>
> this user doesnt show up in the user manager, and the password 
> cannot be changed - looks like the perfect backdoor for everybody.
>
>
>

References:
- hidden admin user on every HP MSA2000 G3
  - From: hpdisclosure

Prev by Date: Re: [Full-disclosure] Flaw in Microsoft Domain Account CachingAllows Local Workstation Admins to Temporarily Escalate Privileges andLogin as Cached Domain Admin Accounts (2010-M$-002)
Next by Date: Re: RE: [Full-disclosure] Flaw in Microsoft Domain Account Caching Allows Local Workstation Admins to Temporarily Escalate Privileges and Login as Cached Domain Admin Accounts (2010-M$-002)
Previous by thread: hidden admin user on every HP MSA2000 G3
Next by thread: Re: hidden admin user on every HP MSA2000 G3
Index(es):
- Date
- Thread