Synopsis
The remote service is protected with default credentials.
Description
The remote LPD Monitoring Server port is configured to use the default credentials to control access. Knowing these, an attacker can gain administrative control of the affected application.
Solution
Edit the application's 'lpdservice.ini' file and change the credentials in the 'GENERAL CONFIGURE' section. Then, restart the service to put the changes into effect.
Plugin Details
File Name: wincomlpd_lpdservice_default_creds.nasl
Supported Sensors: Nessus
Vulnerability Information
Excluded KB Items: global_settings/supplied_logins_only