NetSight
low3.7

CVE-2013-5229

The Remote Desktop full-screen feature in Apple OS X before 10.9 and Apple Remote Desktop before 3.7 sends dialog-box text to a connected remote host upon bein…

Impact

The Remote Desktop full-screen feature in Apple OS X before 10.9 and Apple Remote Desktop before 3.7 sends dialog-box text to a connected remote host upon being woken from sleep, which allows physically proximate attackers to bypass intended access restrictions by entering a command in this box.

Affected products

VendorProductAffected versions
AppleMac Os X
through 10.8.5
AppleApple Remote Desktop
through 3.6.2

Weakness classification

References