CVE-2001-0102

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner password and allows the Normal user to log in as the Owner account without a password.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-12/0497.htmlExploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5830
http://archives.neohapsis.com/archives/bugtraq/2000-12/0497.htmlExploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5830

Timeline

Published: Feb 12, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-01034.6CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could allow attackers to eas CVE-2001-01047.2MDaemon Pro 3.5.1 and earlier allows local users to bypass the "lock server" security setting by pressing the Cancel button at the password CVE-2001-01052.1Vulnerability in top in HP-UX 11.04 and earlier allows local users to overwrite files owned by the "sys" group.CVE-2001-01065.0Vulnerability in inetd server in HP-UX 11.04 and earlier allows attackers to cause a denial of service when the "swait" state is used by a s CVE-2001-01075.0Veritas Backup agent on Linux allows remote attackers to cause a denial of service by establishing a connection without sending any data, wh CVE-2001-01085.0PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unres CVE-2001-01091.2rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctmp temporary file.CVE-2001-01107.2Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmental variable.CVE-2001-01117.2Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument.CVE-2001-01127.2Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands.CVE-2001-011310.0statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used a CVE-2001-01145.0statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter.