Apple Mac OS X Lock Screen CVE-2013-5188 Local Security Bypass Vulnerability

Bugtraq ID:	63348
Class:	Design Error
CVE:	CVE-2013-5188
Remote:	No
Local:	Yes
Published:	Oct 22 2013 12:00AM
Updated:	Oct 22 2013 12:00AM
Credit:	Levi Musters
Vulnerable:	Apple Mac OS X 10.8.5 Apple Mac OS X 10.8.4 Apple Mac OS X 10.8.2 Apple Mac OS X 10.8.1 Apple Mac OS X 10.8.3 Apple Mac OS X 10.8
Not Vulnerable:	Apple Mac OS X 10.9

Apple Mac OS X Lock Screen CVE-2013-5188 Local Security Bypass Vulnerability

Apple Mac OS X is prone to a local security-bypass vulnerability.

An attacker with physical access to a computer can exploit this issue to bypass screen lock. Successful exploits may lead to other attacks.

Note: This issue was previously covered in BID 63282 (Apple Mac OS X APPLE-SA-2013-10-22-3 Multiple Security Vulnerabilities), but has been given its own record to better document it.

Apple Mac OS X versions prior to 10.9 are vulnerable.

Apple Mac OS X Lock Screen CVE-2013-5188 Local Security Bypass Vulnerability

An attacker requires physical access to exploit the issue.

Apple Mac OS X Lock Screen CVE-2013-5188 Local Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apple Mac OS X Lock Screen CVE-2013-5188 Local Security Bypass Vulnerability

References:

• Cisco TelePresence Video Communication Server (VCS) Homepage (Cisco)
  
• Mac OS X Homepage (Apple)
  
• About the security content of OS X Mavericks v10.9 (Apple)