As far as i know there's no exploit for remote anything...
but there's just "trial" default password in trial version.
And while searching the net i've notified that mostly in that cases remote anything is installed by some malware programs.
for example
CODE
BKDR_BOOSTDB.A
This memory-resident backdoor program contains no propagation routine and must be manually ran on a machine. It serves as a server component used by a remote user to control the affected system.
By default, it opens port 4000 and waits for commands from the malicious user such as:
* Activates Ctrl-Alt-Del
* Blank screen
* Disconnect user from the Internet
* Get passwords
* Log off current user
* Play a sound
* Restart, shut down, or lock up the machine
* Send commands and dialog box
* Share cliboard
* Start screensavers
* Transfer file
It also attempts to drop a copy of SLAVE.EXE and has an option to create a customized copy of itself as MY_SLAVE.EXE in the Windows folder.
This backdoor runs on Windows 95, 98, ME, NT, 2000, and XP.
