Description
Keychain in Apple Mac OS X 10.3.9 and 10.4.6 might allow an application to bypass a locked Keychain by first obtaining a reference to the Keychain when it is unlocked, then reusing that reference after the Keychain has been locked.
References
- 17951 vdb-entry
- ADV-2006-1779 vdb-entry
- TA06-132A third-party-advisory
- 1016072 vdb-entry
- APPLE-SA-2006-05-11 vendor-advisory
- 20077 third-party-advisory
- 25590 vdb-entry
- macos-keychain-security-bypass(26413) vdb-entry