Description
Identix BioLogon 2.03 and earlier does not lock secondary displays on a multi-monitor system running Windows 98 or ME, which allows an attacker with physical access to the system to bypass authentication through a secondary display.
References
- identix-biologon-auth-bypass(6948) vdb-entry
- 20010802 Identix BioLogon Client security bug mailing-list
- 5453 vdb-entry
- 3140 vdb-entry
- 20010808 Response to Identix BioLogon Client security bug mailing-list