[12145] in bugtraq
Re: Weakness In "The Matrix" Screensaver For Windows
daemon@ATHENA.MIT.EDU (Neon Bunny)
Wed Oct 6 14:57:12 1999
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Message-Id: <19991005211756.51643.qmail@hotmail.com>
Date: Tue, 5 Oct 1999 22:17:38 +0100
Reply-To: Neon Bunny <the_neon_bunny@HOTMAIL.COM>
From: Neon Bunny <the_neon_bunny@HOTMAIL.COM>
X-To: BUGTRAQ@SECURITYFOCUS.COM
To: BUGTRAQ@SECURITYFOCUS.COM
This problem isn't unique to this program/screen saver, a short while ago I
downloaded a "Stressed Eric" (not rude for the US readers :) ) screen saver
from www.beeb.com who's password could be bypassed in a similar way. Would I
be right in thinking that the password dialog box was not the standard
windows screensaver one and was one written especially by the programmers,
if this is the case then why have they needed to do this? (back door? or
maybe they've written it using the same SS creation software?)
NeonBunny
WebSite: http://www.bunnybox.org
PGP Key: http://www.bunnybox.org/neonbunny.asc
| ----- Original Message -----
| From: Boyce, Nick <nick.boyce@EDS.COM>
| To: <BUGTRAQ@SECURITYFOCUS.COM>
| Sent: Monday, October 04, 1999 4:26 PM
| Subject: Weakness In "The Matrix" Screensaver For Windows
| <SNIP>
| | Running on Windows 95 OSR2, if I set the "Password protected"
screensaver
| | option, then when the screen saver is running, if I move the mouse or
| press
| | a key to wake the screensaver up, a password prompt appears as it
should,
| | but I can then simply press the "Escape" keyboard key and the
screensaver
| | terminates with no password required - aaaaggghh !
| <SNIP>
| | > Nick Boyce
| | > Systems Team, EDS Healthcare, Bristol, UK
| | >
| |
