CVE-1999-1077
MediumExploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
The idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard sequence, which brings up a debugger that the attacker can use to disable the lock.
Risk Assessment
Attackers can gain access to user sessions by bypassing security measures, potentially leading to the exposure of sensitive information.
Recommendation
It is recommended to update the system to a newer version that does not contain this vulnerability and to implement additional security measures such as monitoring user activity.
Original NVD description (English source)
Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard sequence, which brings up a debugger that the attacker can use to disable the lock.