A good friend of mine woke up one day to discover that someone had changed the admin password on his mac. It seems the same attacker also broke into his Yahoo email. Assuming he was on an unsecured network is there some kind of Mac OS X vulnerability that would allow an attacker to login remotely and change the admin password, even if remote management and remote login were disabled? How could someone without physical access to the machine do this?

  • 1
    I think you answered your own question — being on an unsecured network means it's not secured, therefore it would make ANY system vulnerable.
    – l'L'l
    Jul 9, 2012 at 2:28
  • It's very unlikely that the attacker had no physical access if he or she managed to change the password of root.
    – bot47
    Jul 9, 2012 at 9:20
  • 1
    by admin password do you mean the password of his account or the actual root password?
    – dstarh
    Jul 9, 2012 at 14:31

1 Answer 1


CVEdetails.com currently lists 783 vulnerabilities in Mac OS X, of which over 100 allow remote attacks, and many allow Admin access to be gained.

If you do want to ask about specifics, http://security.stackexchange.com welcomes a wide range of security questions.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .