PT-1999-1561 · Apple · Macos 9

Published 1999-11-01 · Updated 2021-09-22 · CVE-1999-1077

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MacOS 9

Description The issue allows local attackers to bypass the password protection of idled sessions. This can be achieved via the programmer's switch or the CMD-PWR keyboard sequence, which brings up a debugger. The attacker can then use this debugger to disable the lock, effectively bypassing the password protection.

Recommendations For MacOS 9, as a temporary workaround, consider disabling the idle locking function until a more permanent solution is available. Restrict access to the debugger to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-1999-1077

Affected Products

Macos 9

References · 3

• 🔥 http://securityfocus.com/bid/756 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1077 · Security Note
• http://marc.info/?l=bugtraq&m=94149318124548&w=2 · Note