full-disclosure - Dell iDRAC6

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <000001cc3d0e$438aad20$caa00760$@net>
Date: Thu, 7 Jul 2011 21:27:55 -0400
From: "phil" <jabea@...ea.net>
To: <full-disclosure@...ts.grok.org.uk>
Subject: Dell iDRAC6

Is it only me, but the iDRAC6 from Dell is kinda insecure. The default
username and password is always root / calvin. (I configured a lot of Dell
server from like  R610 to NX3000 and they all share that default password)

On the other hand, hp iLO got hardcoded password that change from each
servers they ship.

Both of them come pre-configured on some private class IP, at least the
iDRAC is not DHCP by default, that's the only thing that make me think it's
not at 100% insecure, but just not secure at 100% either.

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/