The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109 implements an option for exclusive access to an RFC server, which allows remote attackers to cause a denial of service (client lockout) via unspecified vectors. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended.
CVSS Score
5.0
EPSS Score
0.025
Published
2007-04-10
"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner password and allows the Normal user to log in as the Owner account without a password.
CVSS Score
7.2
EPSS Score
0.005
Published
2001-02-12
A system does not present an appropriate legal message or warning to a user who is accessing it.
CVSS Score
10.0
EPSS Score
0.06
Published
2000-06-01
MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File.
CVSS Score
4.6
EPSS Score
0.008
Published
1999-07-10
Control Panel "Password Security" option for Apple Powerbooks allows attackers with physical access to the machine to bypass the security by booting it with an emergency startup disk and using a disk editor to modify the on/off toggle or password in the aaaaaaaAPWD file, which is normally inaccessible.
CVSS Score
4.6
EPSS Score
0.005
Published
1999-05-21
Page 138