Vulnerability Development mailing list archives

Re: Windows 2000 remote brute force


From: Christopher Gerg <gerg () berbee com>
Date: Tue, 6 Feb 2001 11:51:33 -0600

*snip*
just you must login as a 'guest' user and try some users names
and know if a user exist or not.. and then brute force the password of that
user :)
*snip*

So; "if they have taken steps to make their environment insecure...".  The
guest account is disabled by default (as it should be).


Current thread: