Windows XP Home Edition all versions netbios sessions bug

R

Rafel Ivgi

Hi!

I am a security researcher and a software developer and this bug has been
disturbing me for years!!!

I have a home network, no domain, all computers have same workgroup name:
"WORKGROUP".

All my computers are default installation Windows XP SP3 Professional
English except one Windows Home Edition (its an OEM version coming with Sony
VIAO laptop, also updated to XP SP3, but the service pack is not the cause of
the problem)

In all my computers, I enabled file sharing in the windows firewall and all
the share settings are standard and enabled.

No security software or any hooking possible driver is installed on any of
my computers.

The problem is i cannot connect to any netbios share/rpc service in the Home
Edition computer.

Now the weird part, the only way which i am able to connect to the home
edition computer is if i am connecting from it to another computer on my
network using ONLY THE ADMINISTRATOR account and no other account even
accounts with full administrator privilleges. Once i connected to another
computer using the administrator accountm then he can connect back to me.

I know the administrator account comes with a blank password at all xp home
edition or just in OEM versions and it may not work because of

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
limitblankpassworduse=dword:1

anyway in this case i changed the administrator password in my windows home.
I know that windows xp home edition supports only simple file shating and
that the design of simple file sharing is to share file access only using the
GUEST account
BUT this still doesn't explain why if the ADMINISTRATOR account CAN FULLY
share files with a windows xp pro(with simoke file sharing turned off) but
ONLY AFTER A "NET USE" WAS INITIATED FROM THE XP HOME EDITION MACHINE and ANY
other attempt to connect to the xp home from remote using the administrator
account is denied.

Fix this bug, thank you.

b.t.w
Where is the "windows xp home edition bug report" area on microsoft website?
 
J

Jim

Rafel Ivgi said:
Hi!

I am a security researcher and a software developer and this bug has been
disturbing me for years!!!

I have a home network, no domain, all computers have same workgroup name:
"WORKGROUP".

All my computers are default installation Windows XP SP3 Professional
English except one Windows Home Edition (its an OEM version coming with
Sony
VIAO laptop, also updated to XP SP3, but the service pack is not the cause
of
the problem)

In all my computers, I enabled file sharing in the windows firewall and
all
the share settings are standard and enabled.

No security software or any hooking possible driver is installed on any of
my computers.

The problem is i cannot connect to any netbios share/rpc service in the
Home
Edition computer.

Now the weird part, the only way which i am able to connect to the home
edition computer is if i am connecting from it to another computer on my
network using ONLY THE ADMINISTRATOR account and no other account even
accounts with full administrator privilleges. Once i connected to another
computer using the administrator accountm then he can connect back to me.

I know the administrator account comes with a blank password at all xp
home
edition or just in OEM versions and it may not work because of

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
limitblankpassworduse=dword:1

anyway in this case i changed the administrator password in my windows
home.
I know that windows xp home edition supports only simple file shating and
that the design of simple file sharing is to share file access only using
the
GUEST account
BUT this still doesn't explain why if the ADMINISTRATOR account CAN FULLY
share files with a windows xp pro(with simoke file sharing turned off) but
ONLY AFTER A "NET USE" WAS INITIATED FROM THE XP HOME EDITION MACHINE and
ANY
other attempt to connect to the xp home from remote using the
administrator
account is denied.

Fix this bug, thank you.

b.t.w
Where is the "windows xp home edition bug report" area on microsoft
website?
Yet another poster who believes he is talking to Microsoft. It isn't so.
There is a way to send a message to Microsoft, but this newsgroup is not it.
Jim
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top