# # This script was written by Chris Foster # # # See the Nessus Scripts License for details # account = "db2fenc1"; password = "ibmdb2"; if(description) { script_id(11861); script_version ("$Revision$"); script_cve_id("CAN-2001-0051"); script_name(english:string("Default password (", password, ") for ", account)); script_description(english:string(" The account '", account, "' has the password ", password, " An attacker may use it to gain further privileges on this system Risk factor : High Solution : Set a strong password for this account or disable it. This may disable dependant applications so beware")); script_summary(english:"Logs into the remote host", francais:"Translate"); script_copyright(english:"This script is Copyright (C) 2003 Chris Foster"); script_category(ACT_GATHER_INFO); script_family(english:"Default Unix Accounts"); script_dependencie("find_service.nes"); script_require_ports("Services/telnet", 23); exit(0); } # # The script code starts here : # include("default_account.inc"); port = check_account(login:account, password:password); if(port)security_hole(port);