[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Insufficient Authentication vulnerability in Asus notebook
I want to warn you about Insufficient Authentication vulnerability in Asus
After publication of information about Insufficient Authentication
vulnerability in Acer notebooks
(http://www.securityfocus.com/archive/1/503398/30/0/), I decided to
investigate all notebooks of my friends. Particularly I checked two Asus
notebooks: at one with Windows XP Professional there is no such
vulnerability, at another with Windows XP Home Edition there is such
In Windows XP Home in default administrator's account “Administrator” there
is empty password. And it does not set equal to password of first admin,
when admin account is creating during first start of notebook (as it happens
during installation of Windows XP). So with physical access to notebook,
anybody can enter into the system with administrator's rights.
Vulnerable models of notebooks: Asus А6500R and potentially other models.
I mentioned about these vulnerability at my site
Now I'm continue to investigate this situation. If you'll find such case in
your notebook or in desktop PC, then inform me on email.
Best wishes & regards,
Administrator of Websecurity web site