• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

NT Anonymous Users Can Obtain The Password Policy Under Windows NT 4.0 Vulnerability

Service Pack 3 added the ability to restrict anonymous users from obtaining information about the system. Even with SP3 installed anonymous users are able to retrieve the systems password policy.

Normally Windows NT uses anonymous access to the password policy to provide users with meaningful error message such as in the case of when an user changes his password before login in.