[12441] in bugtraq
Re: Mac OS 9 Idle Lock Bug
daemon@ATHENA.MIT.EDU (devbugs@APPLE.COM)
Thu Nov 4 15:37:46 1999
Message-Id: <199911041941.TAA41132@kazon.corp.apple.com>
Date: Thu, 4 Nov 1999 19:41:57 GMT
Reply-To: devbugs@APPLE.COM
From: devbugs@APPLE.COM
X-To: ssh@shn.nu
To: BUGTRAQ@SECURITYFOCUS.COM
Please include the line below in follow-up emails for this request.
Follow-up: 1094807
Hi Ben,
The original issue, that was logged in as # 2404562 was found to be a duplicate of an
already open issue, # 2405549. This information was reported back to the originator
of the bug report, Sean Sosik-Hamor.
To ensure that the appropriate data is collected, please use the Bug Reporter when sending us your bug reports. The Bug Reporter can be found at:
<http://developer.apple.com/bugreporter>
If the submitter is not currently an Apple developer, they may join our Online program at no charge.
Addtional information can be found at this same website.
Regards,
Sean MacMillan
Worldwide Developer Relations
Apple Computer, Inc
Send follow ups to devbugs@apple.com.
Send any comments on my work to devfeedback@apple.com.
REQUEST ------------------------------------------------------------------------
This message is in MIME format. The first part should be readable text,
while the remaining parts are likely unreadable without MIME-aware tools.
Send mail to mime@docserver.cac.washington.edu for more info.
--W/nzBZO5zC0uMSeA
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII
Content-ID: <Pine.GSO.4.10.9911040902052.17474@www.securityfocus.com>
We already have this listed in our database with Apple bug id # 2404562.
Is this a mistake, or has there been two bug ids associated with this
problem?
We have the idle lock bug documented at:
http://www.securityfocus.com/bid/745
We also have another recent MacOS vuln, along similar lines, documented
at:
http://www.securityfocus.com/bid/756
Any help would be greatly appreciated.
Thank you,
Ben Greenbaum
Site Content Manager
Security Focus
http://www.securityfocus.com
--W/nzBZO5zC0uMSeA
Content-Type: MESSAGE/RFC822; CHARSET=US-ASCII
Content-ID: <Pine.GSO.4.10.9911040902053.17474@www.securityfocus.com>
Content-Description:
Return-Path: <>
Delivered-To: aleph1@SECURITYFOCUS.COM
Received: (qmail 4456 invoked fro; 3 Nov 1999 22:37:25 -0000
Received: from lists.securityfocus.com (207.126.127.68)
by securityfocus.com with SMTP; 3 Nov 1999 22:37:25 -0000
Received: from lists.securityfocus.com (lists.securityfocus.com [207.126.127.68])
by lists.securityfocus.com (Postfix) with ESMTP id 51A9C1F1BC
for <aleph1@SECURITYFOCUS.COM>; Wed, 3 Nov 1999 13:51:25 -0800 (PST)
Date: Wed, 3 Nov 1999 13:51:25 -0800
From: "L-Soft list server at LISTS.SECURITYFOCUS.COM (1.8d)" <LISTSERV@LISTS.SECURITYFOCUS.COM>
Subject: BUGTRAQ: approval required (296CE23E)
To: Elias Levy <aleph1@SECURITYFOCUS.COM>
Message-Id: <19991103215125.51A9C1F1BC@lists.securityfocus.com>
This message was originally submitted by snrp@KAZON.CORP.APPLE.COM to the
BUGTRAQ list at LISTS.SECURITYFOCUS.COM. You can approve it using the "OK"
mechanism, ignore it, or repost an edited copy. The message will expire
automatically and you do not need to do anything if you just want to discard
it. Please refer to the list owner's guide if you are not familiar with the
"OK" mechanism; these instructions are being kept purposefully short for your
convenience in processing large numbers of messages.
----------------- Original message (ID)6CE23E) (73 lines) -------------------
Return-Path: <owner-bugtraq@securityfocus.com>
Delivered-To: bugtraq@lists.securityfocus.com
Received: from securityfocus.com (securityfocus.com [207.126.127.66])
by lists.securityfocus.com (Postfix) with SMTP id 956F61F1BC
for <bugtraq@lists.securityfocus.com>; Wed, 3 Nov 1999 13:51:22 -0800 (PST)
Received: (qmail 12920 invoked by alias); 3 Nov 1999 21:51:22 -0000
Delivered-To: BUGTRAQ@securityfocus.com
Received: (qmail 12904 invoked from network); 3 Nov 1999 21:51:17 -0000
Received: from mail-out1.apple.com (17.254.0.52)
by securityfocus.com with SMTP; 3 Nov 1999 21:51:17 -0000
Received: from mailgate2.apple.com ([17.129.100.225])
by mail-out1.apple.com (8.9.3/8.9.3) with ESMTP id NAA03966
for <BUGTRAQ@securityfocus.com> Wed, 3 Nov 1999 13:51:16 -0800 (PST)
Received: from scv3.apple.com (scv3.apple.com) by mailgate2.apple.com
(Content Technologies SMTPRS 2.0.15) with ESMTP id <B0001443983@mailgate2.apple.com>;
Wed, 03 Nov 1999 13:51:09 -0800
Received: from kazon.corp.apple.com (kazon.corp.apple.com [17.32.112.16])
by scv3.apple.com (8.9.3/8.9.3) with ESMTP id NAA24193;
Wed, 3 Nov 1999 13:51:09 -0800 (PST)
Received: (from snrp@localhost) by kazon.corp.apple.com (AIX4.3/UCB 8.8.8/8.8.8) id VAA93518; Wed, 3 Nov 1999 21:51:08 GMT
Date: Wed, 3 Nov 1999 21:51:08 GMT
Message-Id: <199911032151.VAA93518@kazon.corp.apple.com>
To: ssh@shn.nu, pnutton@awe.co.uk
Cc: BUGTRAQ@securityfocus.com
Subject: Re: Mac OS 9 Idle Lock Bug
From: devbugs@apple.com
Sender: snrp@kazon.corp.apple.com
Please include the line below in follow-up emails for this request.
Follow-up: 1094807
Hi Paul,
Thank you for bringing this issue to our attention. This is a known issue that is currently being investigated. It has been filed into our bug database as ID # 2405549.
I do not have a resolution for this issue at this time.
In the future if you would like to check on any possible status on your issue, please send an email to devbugs@apple.com referring to the Bug ID #.
Your input is greatly appreciated.
Regards,
Sean MacMillan
Worldwide Developer Relations
Apple Computer, Inc
Send follow ups to devbugs@apple.com
Send any comments on my work to devfeedback@apple.com
REQUEST ------------------------------------------------------------------------
1094807
Please could you let me know of the progress of resolving the above bug,
as I wish to be able to upgrade to MacOS 9 but operate in a secure
environment.
--
Paul Nutton, Systems Administrator, +44 (0)118 982 7028
AWE plc, pnutton@awe.co.uk
In a world without walls and fences, who needs windows and gates?
DB REFERENCE -------------------------------------------------------------------
TIME IN: 26-Oct-1999 07:43 PDT
TIME OUT: 03-Nov-1999 14:32 PDT
Copyright 1999, Apple Computer, Inc.
SECURITY: NON-DISCLOSURE US
--W/nzBZO5zC0uMSeA--
DB REFERENCE -------------------------------------------------------------------
TIME IN: 26-Oct-1999 07:43 PDT
TIME OUT: 04-Nov-1999 12:25 PDT
Copyright 1999, Apple Computer, Inc.
SECURITY: NON-DISCLOSURE USE ONL