First published: Tue Oct 25 2005(Updated: )
SecurityAgent in Apple Mac OS X 10.4.2, under certain circumstances, can cause the "Switch User..." button to appear even though the "Enable fast user switching" setting is disabled, which can allow attackers with physical access to gain access to the desktop and bypass the "Require password to wake this computer from sleep or screen saver" setting.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Mac OS X Server | =10.4.2 | |
macOS Yosemite | =10.4.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-2742 is considered to have a moderate severity level due to the potential for unauthorized access by attackers with physical access.
To fix CVE-2005-2742, ensure that the settings for fast user switching are properly configured and consider applying any available updates for Mac OS X 10.4.2.
CVE-2005-2742 affects Apple Mac OS X 10.4.2 and Mac OS X Server 10.4.2.
CVE-2005-2742 cannot be exploited remotely as it requires physical access to the machine.
The impact of CVE-2005-2742 is that it allows an attacker to bypass security settings and gain unauthorized access to the user's desktop.