RE: [VulnWatch] Blank Administrator password in DELL XP Professional install

"Michael Scheidell" <[email protected]> Tue, 28 Jun 2005 11:32:28 -0400
Newsgroups gmane.comp.security.vulnerabilities.watch.general
Message-ID <[email protected]>
 
Noop, use dells, like dells, actually, my favorite hardware manufacture
(plug for dell: great hardware, good pricing, wipe hard disk clean and
put on some other operating system) and dell made a specific decision to
not include the dialog box that asks the installed to put in a password
for the administrator.

They used the XP Home Template with they started their build, not the XP
Pro one.

Every retail version _OF_ _XP_ _PRO_ we ever tested (yes, had a blank
admin password) but brought up a dialog box and told you to change it
and warned you that you were at risk if you didn't.
(the current DELL version warns you NOT to change it or you will lose
data)

IBM saw this as a security issue and fixed in in their XP SP2.
Real easy fix.  No brainer, No downside, nor unintended side effects.

As noted in the bulletin.