Description
The Login Window in Apple Mac OS X 10.4 through 10.4.9 displays the software update window beneath the loginwindow authentication dialog in certain circumstances related to running scheduled tasks, which allows local users to bypass authentication controls.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://secunia.com/advisories/24966 ↗
- http://docs.info.apple.com/article.html?artnum=305391 ↗
- http://www.securityfocus.com/bid/23569 ↗
- http://www.us-cert.gov/cas/techalerts/TA07-109A.html ↗
- http://www.osvdb.org/34864 ↗
- http://www.securitytracker.com/id?1017939 ↗
- http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html ↗
- http://www.vupen.com/english/advisories/2007/1470 ↗