## Description

Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "Cancel" option in the dialog box for an application that attempts to verify that the user wants to log out, which returns the attacker into the locked session.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### apple - macos

Affected Versions:

- 9

## References

- http://marc.info/?l=bugtraq&m=94096348604173&w=2
- http://www.securityfocus.com/bid/745
  Exploit Vendor Advisory
- http://marc.info/?l=bugtraq&m=94096348604173&w=2
- http://www.securityfocus.com/bid/745
  Exploit Vendor Advisory

Neural Processor Active