Bugtraq: Re: Weakness In "The Matrix" Screensaver For Windows

[the_neon_bunny () HOTMAIL COM (Neon Bunny)]

This problem isn't unique to this program/screen saver, a short while ago I
downloaded a "Stressed Eric" (not rude for the US readers :) ) screen saver
from www.beeb.com who's password could be bypassed in a similar way. Would I
be right in thinking that the password dialog box was not the standard
windows screensaver one and was one written especially by the programmers,
if this is the case then why have they needed to do this? (back door? or
maybe they've written it using the same SS creation software?)

NeonBunny

WebSite:   http://www.bunnybox.org
PGP Key:   http://www.bunnybox.org/neonbunny.asc

| ----- Original Message -----
| From: Boyce, Nick <nick.boyce () EDS COM>
| To: <BUGTRAQ () SECURITYFOCUS COM>
| Sent: Monday, October 04, 1999 4:26 PM
| Subject: Weakness In "The Matrix" Screensaver For Windows
| <SNIP>
| | Running on Windows 95 OSR2, if I set the "Password protected"
screensaver
| | option, then when the screen saver is running, if I move the mouse or
| press
| | a key to wake the screensaver up, a password prompt appears as it
should,
| | but I can then simply press the "Escape" keyboard key and the
screensaver
| | terminates with no password required - aaaaggghh !
| <SNIP>
| | > Nick Boyce
| | > Systems Team, EDS Healthcare, Bristol, UK
| | >
| |