CVE-1999-1543

macOS - Weak Password Encryption in Users & Groups Data File

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-1999-1543. PoCs published by Dawid adix Adamski.

AI-analyzed exploit summary This exploit demonstrates a password decryption algorithm for MacOS systems (versions 7.5.3, 7.5.5, 8.1, 8.5) by reversing the XOR-based encryption used in the Users & Groups Data File. It includes an AppleScript to automate the decryption process.

Description

MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Dawid adix Adamski · textlocalosx
https://www.exploit-db.com/exploits/19417

This exploit demonstrates a password decryption algorithm for MacOS systems (versions 7.5.3, 7.5.5, 8.1, 8.5) by reversing the XOR-based encryption used in the Users & Groups Data File. It includes an AppleScript to automate the decryption process.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: MacOS 7.5.3, 7.5.5, 8.1, 8.5
No auth needed
Prerequisites: Access to the Users & Groups Data File in the Preferences folder
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=93188174906513&w=2
Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/519
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=93736667813924&w=2

Scores

EPSS 0.0083
EPSS Percentile 53.0%

Details

Status published
Products (7)
apple/macos 7.5.3
apple/macos 7.6
apple/macos 7.6.1
apple/macos 8.0
apple/macos 8.1
apple/macos 8.5
apple/macos 8.6
Published Jul 10, 1999
Tracked Since Feb 18, 2026