PT-2005-4535 · Apple · Macos X

Publicado 2005-12-31 · Atualizado 2008-09-05 · CVE-2005-3782

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Mac OS X versions 10.4.3 through 10.4.6

Description The issue allows users with physical access to bypass login and reboot the system. This can be achieved by entering specific sequences after the username when the "Name and password" setting is used in loginwindow and the "Show the Restart, Sleep, and Shut Down buttons" option is disabled. The sequences that can be used for this purpose include ">restart", ">power", or ">shutdown".

Recommendations For Mac OS X versions 10.4.3 through 10.4.6, consider enabling the "Show the Restart, Sleep, and Shut Down buttons" option to prevent unauthorized system reboots. Additionally, as a temporary workaround, restrict physical access to the system to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2005-3782

Produtos afetados

Macos X

Referências · 2

• 🔥 http://osvdb.org/20776 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-3782 · Nota de Segurança