Apple OS X Lion security flaw?

Visitors can check out the Forum FAQ by clicking this link. You have to register before you can post: click the REGISTER link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. View our Forum Privacy Policy.
Want to receive the latest contracting news and advice straight to your inbox? Sign up to the ContractorUK newsletter here. Every sign up will also be entered into a draw to WIN £100 Amazon vouchers!

You are not logged in or you do not have permission to access this page. This could be due to one of several reasons:

You are not logged in. If you are already registered, fill in the form below to log in, or follow the "Sign Up" link to register a new account.
You may not have sufficient privileges to access this page. Are you trying to edit someone else's post, access administrative features or some other privileged system?
If you are trying to post, the administrator may have disabled your account, or it may be awaiting activation.

Sysman replied

20 September 2011, 12:52
Ta. Given that the reporter is a known Apple basher I wasn't sure.
Leave a comment:
stek replied

20 September 2011, 12:45
Seems to be fixed on 10.7.2 - mine asks for the old passwd....
Leave a comment:
Sysman started a topic Apple OS X Lion security flaw?

20 September 2011, 11:56
Apple OS X Lion security flaw?
Ooops

For some reason Lion forgets to ask for authentication when someone changes a password. Hacking a Mac is as easy as typing "$ dscl localhost -passwd /Search/Users/bob" into Terminal, the Mac command line program. You can then put your own password in and control the machine.

On Leopard, the same command works, but it outputs the following message and you have to enter the old password:

Code:

dscl localhost -passwd /Search/Users/bob New Password: Permission denied. Please enter user's old password:
Tags: None