CVE-1999-1076
macOS 9 - Unauthenticated Session Lock Bypass via Log Out Cancel Dialog
Title source: llmDescription
Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "Cancel" option in the dialog box for an application that attempts to verify that the user wants to log out, which returns the attacker into the locked session.
References (2)
Core 2
Core References
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=94096348604173&w=2
Exploit, Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/745
Scores
EPSS
0.0045
EPSS Percentile
37.0%
Details
Status
published
Products (1)
apple/macos
9
Published
Oct 26, 1999
Tracked Since
Feb 18, 2026