CVE-1999-1076

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "Cancel" option in the dialog box for an application that attempts to verify that the user wants to log out, which returns the attacker into the locked session.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Oct 26, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-10774.6Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CCVE-1999-10787.5WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwordsCVE-1999-10794.6Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program.CVE-1999-10815.0Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files.CVE-1999-10825.0Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a "......" (modified doCVE-1999-10835.0Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a .. (dot dot) attack.CVE-1999-10844.6The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debuCVE-1999-108610.0Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileCVE-1999-10877.5Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address, which causes IE to CVE-1999-10915.0UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modifyCVE-1999-10924.6tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file.CVE-1999-10935.1Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote atta
CVE-1999-1076: Medium severity, CVSS 4.6 | Vulnix