153 matches found
Authentication flaw
The Login Window in Apple Mac OS X 10.4 through 10.4.9 displays the software update window beneath the loginwindow authentication dialog in certain circumstances related to running scheduled tasks, which allows local users to bypass authentication controls...
Authentication flaw
The Login Window in Apple Mac OS X 10.4 through 10.4.9 does not display the screen saver authentication dialog in certain circumstances when waking from sleep, even though the "require a password to wake the computer from sleep" option is enabled, which allows local users to bypass authentication...
CVE-2007-0737
The Login Window in Apple Mac OS X 10.3.9 through 10.4.9 does not properly check certain environment variables, which allows local users to gain privileges via unspecified vectors...
CVE-2007-0738
The Login Window in Apple Mac OS X 10.4 through 10.4.9 does not display the screen saver authentication dialog in certain circumstances when waking from sleep, even though the "require a password to wake the computer from sleep" option is enabled, which allows local users to bypass authentication...
Code injection
The Login Window in Apple Mac OS X 10.3.9 through 10.4.9 does not properly check certain environment variables, which allows local users to gain privileges via unspecified vectors...
CVE-2007-0738
The CVE affects Apple Mac OS X versions 10.4 through 10.4.9. The Login Window fails to display the screen saver authentication dialog in certain wake-from-sleep scenarios, even when the setting “require a password to wake the computer from sleep” is enabled, enabling local bypass of authenticatio...
CVE-2007-0738
The Login Window in Apple Mac OS X 10.4 through 10.4.9 does not display the screen saver authentication dialog in certain circumstances when waking from sleep, even though the "require a password to wake the computer from sleep" option is enabled, which allows local users to bypass authentication...
CVE-2007-0737
CVE-2007-0737 affects Apple Mac OS X 10.3.9 through 10.4.9, specifically the Login Window. The vulnerability arises because the Login Window does not properly check certain environment variables, allowing local users to gain privileges via unspecified vectors. The provided documents do not specif...
CVE-2007-0739
The CVE-2007-0739 issue affects Apple Mac OS X 10.4 through 10.4.9 . The vulnerability arises when the Login Window displays the software update window beneath the loginwindow authentication dialog in certain circumstances related to scheduled tasks, allowing a local user to bypass authentication...
CVE-2007-0739
The Login Window in Apple Mac OS X 10.4 through 10.4.9 displays the software update window beneath the loginwindow authentication dialog in certain circumstances related to running scheduled tasks, which allows local users to bypass authentication controls...
CVE-2007-0737
The Login Window in Apple Mac OS X 10.3.9 through 10.4.9 does not properly check certain environment variables, which allows local users to gain privileges via unspecified vectors...
CVE-2005-2503
AppKit for Mac OS X 10.3.9 and 10.4.2 allows attackers with physical access to create local accounts by forcing a particular error to occur at the login window...
CVE-2003-1008
CVE-2003-1008 describes an unknown vulnerability in Mac OS X 10.2.8 and 10.3.2 where a local user can bypass the screen saver login window and write a text clipping to the desktop or another application. The connected documents corroborate a local-attack scenario with partial confidentiality/inte...