RE: [VulnWatch] Blank Administrator password in DELL XP Professional install
"Michael Scheidell" <[email protected]> Tue, 28 Jun 2005 11:32:28 -0400
| Newsgroups | gmane.comp.security.vulnerabilities.watch.general |
|---|---|
| Message-ID | <[email protected]> |
Noop, use dells, like dells, actually, my favorite hardware manufacture (plug for dell: great hardware, good pricing, wipe hard disk clean and put on some other operating system) and dell made a specific decision to not include the dialog box that asks the installed to put in a password for the administrator. They used the XP Home Template with they started their build, not the XP Pro one. Every retail version _OF_ _XP_ _PRO_ we ever tested (yes, had a blank admin password) but brought up a dialog box and told you to change it and warned you that you were at risk if you didn't. (the current DELL version warns you NOT to change it or you will lose data) IBM saw this as a security issue and fixed in in their XP SP2. Real easy fix. No brainer, No downside, nor unintended side effects. As noted in the bulletin.