Penetration Testing: RE: Compaq Remote Insight Lights-Out Edition UDP ports

From: Coyle, Brian <Brian.Coyle_at_disney.com>
Date: Fri, 4 Jan 2002 16:52:11 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

According to this:
ftp://ftp.compaq.com/pub/products/servers/management/159206-005bm.pdf

(On page 44) The password is the last four digits of the serial number.

-- Brian

- -----Original Message-----
From: Lee, Rune [mailto:Rune.Lee_at_intria.com]
Sent: Friday, January 04, 2002 16:18
To: 'Matthew Long'; 'pen-test_at_securityfocus.com'
Subject: RE: Compaq Remote Insight Lights-Out Edition UDP ports

What does the number look like? I believe it is the MAC address of the
built in NIC.

- -----Original Message-----
From: Matthew Long [mailto:matthew.long_at_loftusitns.co.uk]
Sent: Friday, January 04, 2002 3:35 AM
To: 'pen-test_at_securityfocus.com'
Subject: RE: Compaq Remote Insight Lights-Out Edition UDP ports

There are 2 versions of this board that I have come across.
The cheap ethernet only and the more expensive ethernet and modem (this has
battery backup in case of power faliure).
I think the 1024 maybe "carbon copy" that was supplied on the modem based
boards.

The boards are supplied with what looks like random default passwords on a
little brown tag (which engineers seem to attach to the front of the
server). Does anyone know if it is random or related to something like the
serial no of the card?

-
----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (MingW32)
Comment: This communication is confidential, intended only for the named
recipient(s) above and may contain trade secrets or other information that
is exempt from disclosure under applicable law. Any use, dissemination,
distribution or copying of this communication by anyone other than the named
recipient(s) is strictly prohibited. If you have received this communication
in error, please immediately notify us by calling (407) 828-1750. Thank you.

iEYEARECAAYFAjw2IUgACgkQHJszdJS2ekuiwACeOSWHWsGu8KDboSA8uLvxT+ai
x0wAn2llM6kZQkSd+rDESeBY2Zdqn5vu
=MHKZ
-----END PGP SIGNATURE-----

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/
Received on Jan 04 2002