CVE-2001-0102 - "Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing

CVE-2001-0102

Summary

"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner password and allows the Normal user to log in as the Owner account without a password.

References

http://archives.neohapsis.com/archives/bugtraq/2000-12/0497.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/5830

Vulnerable Configurations

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

CVSS

Base:	7.2 (as of 22-09-2021 - 14:22)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bugtraq	20001229 Mac OS 9 Multiple Users Control Panel Password Vulnerability
xf	macos-multiple-users(5830)

Last major update

22-09-2021 - 14:22

Published

12-02-2001 - 05:00

Last modified

22-09-2021 - 14:22