BACKDOR in storage array by HP, in P2000/MSA2000 G3 model

[vermaden]

http://www.geek.com/articles/chips/s...rays-20101214/

If you do happen to use on at your place of work, you should be aware of a recent discovery that there is a hidden user on each of these boxes that does not show up in the user manager.

This admin user, with a password of !admin, can’t be changed in any way, including the password, since they do not show up in user manager. This is the kind of backdoor that would cripple any business that relied on secure networked storage, should your network be discovered by someone malicious.

Hopefully there is an update HP can deploy en masse that could resolve such a backdoor, but for now it is a problem that all HP MSA2000 G3 owners should be aware of.

[J65nko]

For an update see http://www.h-online.com/security/new...e-1154257.html

[vermaden]

Thanks for update mate, we have several of these here.

An immediate fix for this issue has been identified and customers are rapidly being informed of the solution.

Well ... thats bullshit since no one from HP contacted us about that case