OSVDB ID: 12673 Title: Identix BioLogon CTRL-ALT-DEL Administrative Access |
Info |
|
|
Dates |
||||
|
|
Description |
BioLogon contains a flaw that may allow a malicious user to bypass authentication. The issue is triggered when CTRL-ALT-DEL is issued at a logon screen, which grants an attacker access to the GINA (Graphical Identification and Authentication) interface. From this interface, the attacker can initiate browsing with SYSTEM privileges. It is possible that the flaw may allow arbitrary file access and modification resulting in a loss of confidentiality and/or integrity. |
Classification |
Location:
Physical Access Required
Attack Type: Authentication Management Impact: Loss of Confidentiality, Loss of Integrity Exploit: Exploit Available Disclosure: OSVDB Verified |
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, Identix has released a patch to address this vulnerability. |
Products |
|
References |
|
Credit |
|
state.or.us - Oregon Department of Human Services