Alliedassault - View Single Post

Bazooka_Joe · **New Security Vunurability for Windows XP -** 02-20-2003, 11:13 AM

This wouldn't apply really to home users as much as coporate users, or even a PC lab at a facility/school.

[quote:ae2fa]An anonymous reader writes "Access to a Windows 2000 CD is all that is needed to bypass all (well, most) Windows XP security features. An attacker can boot up XP and start the Windows 2000 Recovery Console which allows them to operate as any user, even Administrator, without requiring them to enter a password. This method even allows someone to copy files to removable media, something which normally the Administrator can't even do in the Recovery Console." [/quote:ae2fa]

So basically, you can become an administrator of any machine with just a W2K CD. And I always wondered why my school had 2Ghz boxes with Win98 on them. hake:

	(#1)
Bazooka_Joe is Offline Senior Member Posts: 12,585 Join Date: Jan 2002 Location: Staten Island, NY, USA	New Security Vunurability for Windows XP - 02-20-2003, 11:13 AM This wouldn't apply really to home users as much as coporate users, or even a PC lab at a facility/school. [quote:ae2fa]An anonymous reader writes "Access to a Windows 2000 CD is all that is needed to bypass all (well, most) Windows XP security features. An attacker can boot up XP and start the Windows 2000 Recovery Console which allows them to operate as any user, even Administrator, without requiring them to enter a password. This method even allows someone to copy files to removable media, something which normally the Administrator can't even do in the Recovery Console." [/quote:ae2fa] So basically, you can become an administrator of any machine with just a W2K CD. And I always wondered why my school had 2Ghz boxes with Win98 on them. hake: