NetSight
medium4.6

CVE-1999-1025

CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows…

Impact

CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string.

Affected products

VendorProductAffected versions
SunSolaris
Version 2.6
SunSunos
All versions
Version 5.6

References