Take the 2-minute tour ×
Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

A good friend of mine woke up one day to discover that someone had changed the admin password on his mac. It seems the same attacker also broke into his Yahoo email. Assuming he was on an unsecured network is there some kind of Mac OS X vulnerability that would allow an attacker to login remotely and change the admin password, even if remote management and remote login were disabled? How could someone without physical access to the machine do this?

share|improve this question
1  
I think you answered your own question — being on an unsecured network means it's not secured, therefore it would make ANY system vulnerable. –  l'L'l Jul 9 '12 at 2:28
    
It's very unlikely that the attacker had no physical access if he or she managed to change the password of root. –  Max Ried Jul 9 '12 at 9:20
1  
by admin password do you mean the password of his account or the actual root password? –  dstarh Jul 9 '12 at 14:31

1 Answer 1

CVEdetails.com currently lists 783 vulnerabilities in Mac OS X, of which over 100 allow remote attacks, and many allow Admin access to be gained.

If you do want to ask about specifics, http://security.stackexchange.com welcomes a wide range of security questions.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.