> -----Original Message-----
> From: wiz561@gmail.com [mailto:wiz561@gmail.com]=20
> Sent: Thursday, June 08, 2006 5:29 PM
> To: bugtraq@securityfocus.com
> Subject: Dell Openmanage CD Vulnerability
>=20
>=20
> When you boot up using the Dell PowerEdge Installation and=20
> Server Management Disc (P/N: WG126 Rev. A00, October 2005),=20
> there are two major vulnerabilities on the machine. If you=20
> use this disc to boot up and you are connected to a DHCP=20
> network, there is an SSH server running that does not require=20
> a username and password to login. There is also an X11=20
> server running that accepts connections from anywhere.

we also attempted to inform Dell of an installation vulnerability with
Microsoft Windows XP pro. After asking us our machine serial number
(which I had!) they ignored us. Never to reply back to numerious emails:
http://www.secnap.com/alerts.php?pg=3D8.=20