Description
"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner password and allows the Normal user to log in as the Owner account without a password.
References
- 20001229 Mac OS 9 Multiple Users Control Panel Password Vulnerability mailing-list
- macos-multiple-users(5830) vdb-entry