CVE-2001-0102 - "Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner password and allows the Normal user to log in as the Owner account without a password

Back Back to CVE browser

HIGH

"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner password and allows the Normal user to log in as the Owner account without a password

Published Feb 2, 2001

7.2

HIGH

CVSS 2.0

EPSS 0.53%

Description

"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner password and allows the Normal user to log in as the Owner account without a password.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://archives.neohapsis.com/archives/bugtraq/2000-12/0497.html
mailing-listx_refsource_BUGTRAQExploitVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-0102
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5830
vdb-entryx_refsource_XF

Link	Providers	Tags
http://archives.neohapsis.com/archives/bugtraq/2000-12/0497.html		mailing-listx_refsource_BUGTRAQExploitVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-0102		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5830		vdb-entryx_refsource_XF