CVE-2005-2742
Last modified
CVE-2005-2742 is a vulnerability of currently unknown severity. SecurityAgent in Apple Mac OS X 10.4.2, under certain circumstances, can cause the "Switch User..." button to appear even though the "Enable fast user switching" setting is disabled, which can allow attackers with physical access to gain access to the desktop and bypass the "Require password to wake this computer from sleep or screen saver" setting.. EPSS estimates a 0.36% chance of exploitation in the next 30 days.
Description
SecurityAgent in Apple Mac OS X 10.4.2, under certain circumstances, can cause the "Switch User..." button to appear even though the "Enable fast user switching" setting is disabled, which can allow attackers with physical access to gain access to the desktop and bypass the "Require password to wake this computer from sleep or screen saver" setting.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Mac Os X | 10.4.2 |
| Apple | Mac Os X Server | 10.4.2 |
References
- http://secunia.com/advisories/16920/Patch, Vendor Advisory
- http://www.auscert.org.au/5509Vendor Advisory
- http://www.ciac.org/ciac/bulletins/p-312.shtmlUS Government Resource
- http://secunia.com/advisories/16920/Patch, Vendor Advisory
- http://www.auscert.org.au/5509Vendor Advisory
- http://www.ciac.org/ciac/bulletins/p-312.shtmlUS Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-2742?
How severe is CVE-2005-2742?
How do I fix CVE-2005-2742?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-2736Cross-site scripting (XSS) vulnerability in YaPig 0.95 and e…
- CVE-2005-2737Cross-site scripting (XSS) vulnerability in PhotoPost PHP Pr…
- CVE-2005-2738Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not…
- CVE-2005-2739Keychain Access in Mac OS X 10.4.2 and earlier keeps a passw…
- CVE-2005-2740Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2005-2741Authorization Services in securityd for Apple Mac OS X 10.3.…
- CVE-2005-2743The Java extensions for QuickTime 6.52 and earlier in Apple …
- CVE-2005-2744Buffer overflow in QuickDraw Manager for Apple OS X 10.3.9 a…
- CVE-2005-2745Mail.app in Mail for Apple Mac OS X 10.3.9, when using Kerbe…
- CVE-2005-2746Mail.app in Mail for Apple Mac OS X 10.3.9 and 10.4.2 includ…
- CVE-2005-2747Buffer overflow in ImageIO for Apple Mac OS X 10.4.2, as use…
- CVE-2005-2748The malloc function in the libSystem library in Apple Mac OS…
Are you affected by CVE-2005-2742?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST