Updated:06:15 PM EST Nov 13


this is ggmania.com subsite Major macOS High Sierra Bug Allows Full Admin Access Without Password - TechAmok

Major macOS High Sierra Bug Allows Full Admin Access Without Password - [security]
10:36 AM EST - Nov,29 2017 - post a comment

There appears to be a serious bug in macOS High Sierra that enables the root superuser on a Mac with a blank password and no security check. The bug, discovered by developer Lemi Ergin, lets anyone log into an admin account using the username "root" with no password. This works when attempting to access an administrator's account on an unlocked Mac, and it also provides access at the login screen of a locked Mac.

To replicate, follow these steps from any kind of Mac account, admin or guest:

1. Open System Preferences
2. Choose Users & Groups
3. Click the lock to make changes
4. Type "root" in the username field
5. Move the mouse to the Password field and click there, but leave it blank
6. Click unlock, and it should allow you full access to add a new administrator account.

At the login screen, you can also use the root trick to gain access to a Mac after the feature has been enabled in System Preferences. At the login screen, click "Other," and then enter "root" again with no password. This allows for admin-level access directly from the locked login screen, with the account able to see everything on the computer. It appears that this bug is present in the current version of macOS High Sierra, 10.13.1, and the macOS 10.13.2 beta that is in testing at the moment. It's not clear how such a significant bug got past Apple, but it's likely this is something that the company will immediately address.

Until the issue is fixed, you can enable a root account with a password to prevent the bug from working


Add your comment (free registrationrequired)

Short overview of recent news articles

Nov,13 2018 NVIDIA GeForce 416.94 WHQL Drivers
Nov,13 2018 Windows 10 October Update Version 1809 re-released
Nov,13 2018 Intel i9-9980XE: Disappointing Overclocker, But Good Stock
Nov,13 2018 Apple Rolls Out iPhone X Display Replacement Program
Nov,13 2018 Intel Shows Off Its 5G Modem, Bound for Phones, PCs and More
Nov,13 2018 Eiza Gonzalez Is An Amazing Talent!
Nov,13 2018 Emily Ratajkowski In A Bikini Will Mess Your Brain
Nov,12 2018 Stan Lee Has Passed Away at the Age of 95
Nov,12 2018 Steam Bug Allowed Games to be Downloaded for Free
Nov,12 2018 Xbox Black Friday Deals Include Console Price Drop
Nov,11 2018 Mr Bean in Room 426 - Episode 8
Nov,11 2018 Samsung will release over 1 million foldable phones in the first
Nov,11 2018 This Trick Won The Magic World Championships
Nov,10 2018 Intel Core i9-9900K Re-Reviewed, 95-Watt TDP Results
Nov,10 2018 Apple BANS third parties from selling refurb Macbooks on Amazon
Nov,09 2018 LIKE A BOSS COMPILATION #26 AMAZING Videos 7 MINUTES
Nov,09 2018 Amazon Will Sell New Apple iPhones, iPads, and More
Nov,09 2018 Samsung Is Bringing the Linux Environment to Smartphones
>> News Archive <<

TechAmok - Privacy Policy        loading time:0.01secs