Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2007-3184: MacOS X lets physical attacker change system settings

CVE-2007-3184 · published 19 years ago

Summary

On MacOS X versions before the fix, someone who can physically access a computer can skip the login screen and alter system preferences, including passwords. This happens because a notification from the security agent can be triggered to open the Apple menu. Apply the latest software update to close this gap and protect the device.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
apple	mac_os_x	All versions `cpe:2.3:o:apple:mac_os_x::::::::`

Original advisory text

Cisco Trust Agent (CTA) before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass authentication and modify System Preferences, including passwords, by invoking the Apple Menu when the Access Control Server (ACS) produces a user notification message after posture validation.

References

http://secunia.com/advisories/25598 Third Party Advisory
http://securityreason.com/securityalert/2796 Exploit Third Party Advisory
http://www.cisco.com/en/US/products/products_security_response09186a008085d645.h... Vendor Advisory
http://www.osvdb.org/35340 Broken Link
http://www.securityfocus.com/archive/1/471041/100/0/threaded Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/24415 Patch Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1018217 Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2007/2140 Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/34807 Third Party Advisory VDB Entry

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.2 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-287Improper Authentication

Timeline

Published12 Jun 2007

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2007-3184 · NVD

Track software like this

Free during beta