|
|
Info |
Last Modified |
| 7 months ago |
|
|
|
|
Description |
BioLogon contains a flaw that may allow a malicious user to bypass authentication. The issue is triggered when CTRL-ALT-DEL is issued at a logon screen, which grants an attacker access to the GINA (Graphical Identification and Authentication) interface. From this interface, the attacker can initiate browsing with SYSTEM privileges. It is possible that the flaw may allow arbitrary file access and modification resulting in a loss of confidentiality and/or integrity.
|
|
Classification |
Location:
Physical Access Required
Attack Type:
Authentication Management
Impact:
Loss of Confidentiality,
Loss of Integrity
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
|
|
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, Identix has released a patch to address this vulnerability.
|
|
Products |
|
BioLogon
 |
3.0 |
|
|
|
|
Credit |
- Paul Roberts - paul.a.roberts
 state.or.us - Oregon Department of Human Services
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
