CVE-1999-1393: Medium severity macOS vulnerability
Control Panel "Password Security" option for Apple Powerbooks allows attackers with physical access to the machine to bypass the security by booting it with an emergency startup disk and using a disk editor to modify the on/off toggle or password in the aaaaaaaAPWD file, which is normally inaccessible.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable the Control Panel 'Password Security' option to avoid relying on a mechanism that can be bypassed by booting from an emergency startup disk and editing the aaaaaaaAPWD file.
macOS Control Panel (Password Security) Password Security = disabled - Compensating control
Prevent attackers from booting the machine with external or emergency startup media and restrict physical access to the device (physically secure machines, remove or lock external media, and control access to boot devices).
- Operational
Inspect the aaaaaaaAPWD file for unauthorized changes; if modification is detected, restore the file from a known-good backup or reinitialize/reset the password settings and reconfigure Password Security after remediation.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1393?
CVE-1999-1393 is considered a high severity vulnerability due to potential unauthorized access to sensitive information.
How do I fix CVE-1999-1393?
To mitigate CVE-1999-1393, ensure physical security of the Apple Powerbook and restrict access to emergency startup disks.
What systems are affected by CVE-1999-1393?
CVE-1999-1393 affects Apple macOS versions 8.5 and 8.6.
What is the nature of the vulnerability in CVE-1999-1393?
The vulnerability allows attackers with physical access to bypass security by modifying the password file using an emergency startup disk.
Can CVE-1999-1393 be exploited remotely?
No, CVE-1999-1393 requires physical access to the device to be exploited.