Security Apple’s macOS High Sierra Security Flaw root access without password !

eva2000 · Nov 29, 2017

Just read this news about Apple macOS security flaw and hard to believe such an oversight can happen http://www.news.com.au/technology/g...c/news-story/10000a4cd9e86defbaadd3ee643c1dce !

APPLE users have noticed a troubling flaw in the company’s Mac operating system which lets people circumnavigate password protocols to gain access to the computer.

Raising alarming privacy concerns, it means anyone with physical access to your MacBook or iMac can create a phantom profile that won’t show up on real admin accounts if the machine is running the new High Sierra operating system.

In the device’s System Preferences, under Users & Groups, you can click on the lock and gain system administrator access by simply entering the username “root” and leaving the password blank. After hitting enter a few times it grants access. Once that is done, the trick can be used to log into the computer at any time.
Click to expand...

dcg · Nov 29, 2017

That's cause they are up in the High Sierra...Those mountains are neat but the air is thin, not so much O2

hardousse · Nov 30, 2017

apple make an emergency update for all user i get this

About the security content of Security Update 2017-001
This document describes the security content of Security Update 2017-001.

About Apple security updates
For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page.

For more information about security, see the Apple Product Security page. You can encrypt communications with Apple using the Apple Product Security PGP Key.

Apple security documents reference vulnerabilities by CVE-ID when possible.

Security Update 2017-001
Released November 29, 2017

Directory Utility

Available for: macOS High Sierra 10.13.1

Not impacted: macOS Sierra 10.12.6 and earlier

Impact: An attacker may be able to bypass administrator authentication without supplying the administrator’s password

Description: A logic error existed in the validation of credentials. This was addressed with improved credential validation.

CVE-2017-13872

When you install Security Update 2017-001 on your Mac, the build number of macOS will be 17B1002. Learn how to find the macOS version and build number on your Mac.

If you require the root user account on your Mac, you will need to re-enable the root user and change the root user's password after this update.

Information about products not manufactured by Apple, or independent websites not controlled or tested by Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or use of third-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. Risks are inherent in the use of the Internet. Contact the vendor for additional information. Other company and product names may be trademarks of their respective owners.

Published Date: Nov 29, 2017
Click to expand...

Log in / Register

Forums

Discover Centmin Mod today

Security Apple’s macOS High Sierra Security Flaw root access without password !

eva2000 Administrator Staff Member

dcg Member

hardousse Active Member

.

Log in / Register

Useful Searches

Discover Centmin Mod today

Security Apple’s macOS High Sierra Security Flaw root access without password !

eva2000 Administrator Staff Member

dcg Member

hardousse Active Member

.