Vulnerability Development mailing list archives

Re: is this something?


From: "NetW3.COM Consulting" <netw3 () NETW3 COM>
Date: Wed, 17 Jan 2001 22:19:31 -0600

Microsoft (R) Windows (TM) Version 5.00 (Build 2195)
Welcome to Microsoft Telnet Service
Telnet Server Build 5.00.99201.1
login: guest
Login through Guest account not allowed
login: \\guest
password:
Logon failure: unknown user name or bad password.

Login Failed

I have Win2K Pro SP1, same build as you but was unable
to duplicate this. My guest account settings are
"account disabled, user cannot change password, and
password never expires". Telnet service settings are:

AllowTrustedDomain = 1
AltKeyMapping = 1
DefaultDomain = .
DefaultShell = %SystemRoot%\system32\cmd.exe /q /k
LoginScript = %SystemRoot%\system32\login.cmd
MaxFailedLogins = 3
NTLM = 0
TelnetPort = 23

I believe that all of these settings are default (not sure
about NTLM, since I had to change it from 2).
My login.cmd is the default:

@echo off
rem
rem  Default global login script for the Telnet Server
rem
rem  In the default setup, this command script is executed when the
rem  initial command shell is invoked.  It, in turn, will try to invoke
rem  the individual user's login script.
rem

echo *===============================================================
echo Welcome to Microsoft Telnet Server.
echo *===============================================================

cd %HOMEDRIVE%%HOMEPATH% /d

How do your settings and environment differ? Is there any
other use of "guest" as an object in your network?

Curt Wilson


$ telnet 192.168.0.1
Trying 192.168.0.1...
Connected to 192.168.0.1.
Escape character is '^]'.
Microsoft (R) Windows (TM) Version 5.00 (Build 2195)
Welcome to Microsoft Telnet Service
Telnet Server Build 5.00.99201.1
login: guest
Login through Guest account not allowed
login: \\guest
password:

*===============================================================
Welcome to Microsoft Telnet Server.
*===============================================================
C:\>




=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
| Curt R. Wilson   *   NetW3.COM Consulting    www.netw3.com  |
|    Internet Security, Networking, PC tech,  WWW hosting     |
|  Serving Southern Illinois locally and the world virtually  |
|            netw3 () netw3 com     618-353-7418                 |
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=


Current thread: