D�but du message r�exp�di� :
------------------------------------------------------------------------ ------De: Secunia Security Advisories <[EMAIL PROTECTED]> Date: Sam 5 juil 2003 16:00:36 Europe/Paris �: [EMAIL PROTECTED] Objet: [sec-adv] Mac OS X Screensaver Password Bypass Vulnerability
TITLE: Mac OS X Screensaver Password Bypass Vulnerability
READ ONLINE: http://www.secunia.com/advisories/9184/
CRITICAL: Moderately critical
IMPACT: Security Bypass
WHERE: Local system
OPERATING SYSTEM: Apple Macintosh OS X
DESCRIPTION: A vulnerability has been identified in Mac OS X, which can be exploited by a malicious person with physical access to a system to bypass the password protected screensaver.
It is possible to crash the screensaver and gain full access to the desktop by supplying an overly long string (between 1280 and 1380 characters) in the password field.
The vulnerability has been reported in version 10.2.6. However, prior versions may also be affected.
SOLUTION: Don't rely on the password protected screensaver to prevent people from gaining access to it.
Log out when leaving the system and prevent untrusted people from gaining physical access to it if possible.
REPORTED BY / CREDITS: Delfim Machado
----------------------------------------------------------------------
Secunia recommends that you verify all advisories you receive, by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Contact details: Web : http://www.secunia.com/ E-mail : [EMAIL PROTECTED] Tel : +44 (0) 20 7016 2693 Fax : +44 (0) 20 7637 0419
----------------------------------------------------------------------
David Duhamel
http://home.nordnet.fr/~dduhamel/
AIM/iChat : dduhamel2001
Ou cet homme est mort, ou ma montre est arr�t�e !
(Groucho Marx)
Les minijupes, c'est comme les sondages : �a donne des id�es mais �a
cache l'essentiel.
-- PHOTO HALL Multimedia, leader en Telecom, Informatique, Photo, Video, TV, Hifi. Surfez sur http://www.photohall.be CyberCafe 2.0 <http://www.cybercafe.tv> Chaque Mardi 19h15 sur La 2! Desabonnement par email : <mailto:[EMAIL PROTECTED]>
