PT-2001-2259 · Microsoft+1 · Windows 98+2

Published 2001-08-02 · Updated 2017-10-10 · CVE-2001-1116

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Identix BioLogon versions 2.03 and earlier

Description The issue allows an attacker with physical access to bypass authentication on a multi-monitor system running Windows 98 or ME, due to the lack of locking secondary displays.

Recommendations For Identix BioLogon versions 2.03 and earlier, consider physically securing the system to prevent unauthorized access, as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2001-1116

Affected Products

Identix Biologon

Windows 98

Windows Me

References · 6

• http://ntbugtraq.ntadvice.com/default.asp?pid=36&sid=1&A2=IND0108&L=NTBUGTRAQ&F=P&S=&P=71 · Vendor Advisory
• http://securityfocus.com/bid/3140 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1116 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6948 · Note
• http://ntbugtraq.ntadvice.com/default.asp?pid=36&sid=1&A2=ind0108&L=ntbugtraq&F=P&S=&P=724 · Note
• http://osvdb.org/5453 · Note