what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

screenapple.txt

screenapple.txt
Posted Jul 4, 2003
Authored by Delfim Machado | Site lab.xpto.org

The screen saver that comes with MacOSX crashes when an large amount of characters are entered and then the return key is pressed. At this point, access to the desktop is achieved.

tags | exploit
SHA-256 | 580c1aa4b027ccdd05e8525a8ed42272ff29b6f6fedab5539018ad21fadd994c

screenapple.txt

Change Mirror Download
Hi all,

three days ago i discovered a security issue, with the last MacOSX.

there is a way to crash the screensaver locked with password and gain
the desktop.

how? - you ask.
i don't know the exact amount of characters, only that if you leave a
key pressed for 5 minutes or more and then hit the enter key, you crash
the screensaver and gain access to the desktop.
you can mess the desktop and all around it (network, mail, docs,
anything you can imagine).

i think that this is a huge secure hole and it must be corrected.

i hope that this is good for everyone who cares about "how to secure
your desktop".

solution?
wait until someone at the apple make a patch and realise it...

here is the mail that i've sent to apple security people, they didn't
replied :(

-- BEGIN APPLE MESSAGE --
To:
product-security@apple.com
Subject:
[BUG] forgot your screensaver
password ?? Hackit anyway
Hi all

(tested machines at the bottom of this message)

sorry about the subject, but there is a problem with the auth prompt
when you have the screensaver running.

i do not know the exact amount of characters to make the auth prompt
blow up, but here is what i do:

with the screensaver runnig, leave something at the top of the keyboard
and leave it there for 5 or more minutes, then hit ENTER.
The screensaver dies and you have your desktop open to anyone.

desktop open, network open, hackers go away :)

i'll wait for an answer until 3 of Jully and then send this problem to
full-disclosure@lists.netsys.com and bugtraq@securityfocus.com


if you need more time, please tell me that i'll wait until the patch be
ready to deploy.


OS tested: didn't get a mac not updated ... (uname -a)
(Powerbook)
Darwin roadrunner 6.6 Darwin Kernel Version 6.6: Thu May 1 21:48:54 PDT
2003; root:xnu/xnu-344.34.obj~1/RELEASE_PPC Power Macintosh powerpc
(iMac)
Darwin MacLulo 6.6 Darwin Kernel Version 6.6: Thu May 1 21:48:54 PDT
2003; root:xnu/xnu-344.34.obj~1/RELEASE_PPC Power Macintosh powerpc
(Powerbook)
Darwin Proenca-Powerbook17 6.6 Darwin Kernel Version 6.6: Thu May 1
21:48:54 PDT 2003; root:xnu/xnu-344.34.obj~1/RELEASE_PPC Power
Macintosh powerpc

PS: MacOSX r0x, keep on the good way!

-- END APPLE MESSAGE --


Cheers
--
Delfim Machado - dbcm@xpto.org
XPTO:: Portuguese OpenSource Community - http://lab.xpto.org
Login or Register to add favorites

File Archive:

December 2022

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Dec 1st
    2 Files
  • 2
    Dec 2nd
    12 Files
  • 3
    Dec 3rd
    0 Files
  • 4
    Dec 4th
    0 Files
  • 5
    Dec 5th
    0 Files
  • 6
    Dec 6th
    0 Files
  • 7
    Dec 7th
    0 Files
  • 8
    Dec 8th
    0 Files
  • 9
    Dec 9th
    0 Files
  • 10
    Dec 10th
    0 Files
  • 11
    Dec 11th
    0 Files
  • 12
    Dec 12th
    0 Files
  • 13
    Dec 13th
    0 Files
  • 14
    Dec 14th
    0 Files
  • 15
    Dec 15th
    0 Files
  • 16
    Dec 16th
    0 Files
  • 17
    Dec 17th
    0 Files
  • 18
    Dec 18th
    0 Files
  • 19
    Dec 19th
    0 Files
  • 20
    Dec 20th
    0 Files
  • 21
    Dec 21st
    0 Files
  • 22
    Dec 22nd
    0 Files
  • 23
    Dec 23rd
    0 Files
  • 24
    Dec 24th
    0 Files
  • 25
    Dec 25th
    0 Files
  • 26
    Dec 26th
    0 Files
  • 27
    Dec 27th
    0 Files
  • 28
    Dec 28th
    0 Files
  • 29
    Dec 29th
    0 Files
  • 30
    Dec 30th
    0 Files
  • 31
    Dec 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Hosting By
Rokasec
close