Logitech iTouch Keyboard Command Keys Locked Console Bypass Vulnerability

Bugtraq ID:	4662
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	May 02 2002 12:00AM
Updated:	May 02 2002 12:00AM
Credit:	[email protected]
Vulnerable:	Logitech iTouch Keyboard Logitech Cordless iTouch Keyboard Logitech Cordless Freedom iTouch Keyboard
Not Vulnerable:

Logitech iTouch Keyboard Command Keys Locked Console Bypass Vulnerability

Logitech provides drivers to support their iTouch line of keyboards for Windows NT/2000/XP.

This software will allow the actions associated with the buttons to execute even though the computer has been locked by a user.

A denial of service may be possible if a miscreant with physical access to the keyboard repeatedly pushes buttons.

Logitech iTouch Keyboard Command Keys Locked Console Bypass Vulnerability

There is no exploit code required.

Logitech iTouch Keyboard Command Keys Locked Console Bypass Vulnerability

Solution:
Logitech is reportedly aware of this vulnerability, but no fix is currently available.

Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Logitech iTouch Keyboard Command Keys Locked Console Bypass Vulnerability

References:

• Logitech Homepage (Logitech)