COMMAND

	WebNews default hardcoded passwords

SYSTEMS AFFECTED

	1.1k

PROBLEM

	Shai [http://www.akn-systems.com] found following :
	

	The Netwin Webnews version 1.1k CGI (binaries) contains 4 default  users
	(within the binary) that can not be removed.
	

	While running the \"strings\" command  over  the  file  webnews.pl,  the
	users are revealed:
	

	

	testweb

	newstest

	alwn3845

	imaptest

	alwi3845

	wtest3452

	testweb2

	wtest4879

	

	

	For instance, testweb is the username and newstest is it\'s password.
	

	

SOLUTION

	Nothing yet.