CVE-1999-1076

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 1999-10-26 · updated 2026-06-16

Description

Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "Cancel" option in the dialog box for an application that attempts to verify that the user wants to log out, which returns the attacker into the locked session.

Affected products

Apple macOS: 9

References

http://marc.info/?l=bugtraq&m=94096348604173&w=2
http://www.securityfocus.com/bid/745
http://marc.info/?l=bugtraq&m=94096348604173&w=2
http://www.securityfocus.com/bid/745

Get alerted when CVE-1999-1076 or the next vulnerability affects your stack