CVE
- Id
- 2923
- CVE No.
- CVE-2001-0102
- Status
- Candidate
- Description
- "Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner password and allows the Normal user to log in as the Owner account without a password.
- Phase
- Proposed (20010202)
- Votes
- ACCEPT(1) Frech | NOOP(4) Christey, Cole, Wall, Ziese
- Comments
- Christey> The following post claims that Apple fixed the problem. | However, the web page is broken, and the new page requires | user registration. | BUGTRAQ:20010420 [FYI] Mac OS 9 Multiple Users weakness fixed (was: Mac OS 9 Multiple Users Control Panel Password Vulnerability) | URL:http://marc.theaimsgroup.com/?l=bugtraq&m=98793967806147&w=2