WhizBang Matrix Screen Saver Password Bypass Vulnerability

Bugtraq ID:	3130
Class:	Input Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Aug 01 2001 12:00AM
Updated:	Aug 01 2001 12:00AM
Credit:	Discovered and posted to Bugtraq by knud_erik højgaard <[email protected]> on Aug 1, 2001.
Vulnerable:	WhizBang Matrix Screen Saver - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0
Not Vulnerable:

WhizBang Matrix Screen Saver Password Bypass Vulnerability

The Matrix screen saver application (available from a number of sites including www.screentime.com, www.whatisthematrix.warnerbros.com, etc.) may be configured to disallow unauthorized users to access system resources without a password. This is possible using the Password Protected checkbox in the Display Properties of Windows.

A flaw exists in the Matrix screen saver. If the Password Protected checkbox has been enabled, it is possible to bypass it by clicking cancel and pressing numerous arbitrary keys.

This issue has been confirmed to be vulnerable on Windows 95, 98 and Me.

WhizBang Matrix Screen Saver Password Bypass Vulnerability

References:

• Matrix Screen Saver Download Location (Warner Bros)