CVE-2005-2742 Security feature bypass in n/a
Attackers with physical access can bypass screen lock and fast user switching restrictions to access the desktop.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2005-2742?
CVE-2005-2742 is a medium-severity vulnerability in Apple Mac Os X, published on 25 Oct 2005. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
SecurityAgent in Apple Mac OS X 10.4.2, under certain circumstances, can cause the "Switch User..." button to appear even though the "Enable fast user switching" setting is disabled, which can allow attackers with physical access to gain access to the desktop and bypass the "Require password to wake this computer from sleep or screen saver" setting.
Which versions are affected by CVE-2005-2742?
It affects 2 products.
Products include Apple Mac Os X, Apple Mac Os X Server.
How do I fix CVE-2005-2742?
No fix has been published for CVE-2005-2742 yet. Limit exposure of the affected software until one is available.
Is CVE-2005-2742 being exploited?
There is no known exploitation of CVE-2005-2742 in the wild and no public exploit code.
Other vulnerabilities in Apple Mac Os X
Sources
Also known as GHSA-6vqw-grcm-99rq.