Check the link below, problem or not?

[greyted]

Came across this link today, I think it is worth reading.
This article refers to a supposed issue regarding XP Admin access.

http://www.briansbuzz.com/w/030213

Comments please guys as I have not seen anything like this before. Is it an issue we should be aware of?
Can't try this myself as I do not own a 2000 cd.

 

[mjinks61]

eeek! I think i will stay with Win2K! Good luck, and Happy Computing

 

[smah]

Interesting article. Unfortunately I don't have a 2K cd to try with. I would be interested in tests on this myself. I expect that if this is a true vulnerability, MS will create a fix quickly.

 

[WallyWeasel]

Windows 2000 and NT aren't all that secure either. I have a bootable CD that will change the Administrator password to whatever you want, thus allowing you access.

 

[smah]

Well there will always be 'cracks'. Check the FAQ of this forum for some of them. But I wouldn't expect an older MS os to unkowingly defeat a password.

 

[greyted]

smah,
Agree with your post regards an older os defeating a password. If the article is true I can foresee some problems for admin people.
A quick MS fix required.
Do hope that someone tries a Windows 2k cd and will post the results.

 

[flugh]

I'm no security 'expert' now, but have seen this debated many times in the past regarding Linux and "booting into single user mode" and "booting from a floppy" allowing root access with no password. The mindset I took from that is, if I am an admin in a corporate setting, I wouldn't let anyone boot from any media (floppy or CD), and password protect those options at the BIOS level. Physical access and removable bootable media is sure-fire security hole (how about a Knoppix CD and some cracker tools on a floppy?). Heck, if a user can pick a workstation up off a desk and toss it out the window, you could call that a potential security (okay, maybe just a DoS situation) couldn't you? --
JR

 

[wolluf]

yes it does work - but as various people have mentioned - it requires physical access to machine (and with Linux boot disk to change admin password, you can get into nt, 2k or xp box no problem - so doesn't add t osecurity problems IMO. There was another post recently with similar 'results' - ie need pysical access to machine).

so no real point scaremongering (btw - on the helpful side, all those who don't know - 2k & XP recovery console also work with NT - added bonus eh!!)

 

[smah]

I like flugh's 'DoS' method.

 

[greyted]

wolluf,
No scaremongering inteded, just concerned a user.

flugh,
Would agree with you but have not seen this issue posted here before. Thanks for the post confirming it does work.
Not everybody has Lindows, cool to be aware though.
As smah said, "He would not expect an older os to unknowingly defeat a password."

Thanks guys.