Vulnerability Development mailing list archives

MacOS X Oddity


From: Lucas Holt <Luke () FoolishGames com>
Date: Thu, 28 Nov 2002 11:22:52 -0500

I noticed that on a Mac OS 10.1.5 system, a user with access to a logged
in system (as an admin) can create users without being prompted for  a
password.  To use software update one needs an admin password, but not
to create users with admin rights?

System found on:
Original iBook upgraded to Mac OS 10.1.
10.1.5 update
all post 10.1.5 updates as of 11/26/02

Lucas Holt
Luke () FoolishGames com



Current thread: