JVN#56210048: Apple OS X authentication issue when recovering from sleep mode

Apple OS X contains an issue with authentication when recovering from sleep mode. This issue exists due to a flaw in the the processing of the text entered in the dialog box upon recovering from sleep mode.

Impact

When Apple Remote Desktop is used in full screen mode and the remote connection is alive upon entering sleep mode, the text entered in the dialog box upon recovering from sleep mode is sent to the remotely connected host instead of the local host.
This may result in command execution at the remote host.

Solution

Update Apple OS X and Apple Remote Desktop
The developer has provided fixes for this issue in both Apple OS X and Apple Remote Desktop. Update both OS X and Apple Remote Desktop to the latest versions.

Products Affected

• OS X versions prior to 10.9
• Apple Remote Desktop versions prior to 3.7