medium4.6
CVE-1999-1025
CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows…
Impact
CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Solaris | Version 2.6 |
| Sun | Sunos | All versions Version 5.6 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=90831127921062&w=2
- http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fpatches%2F106027&zone_32=411568%2A%20
- http://www.securityfocus.com/bid/294
- http://marc.info/?l=bugtraq&m=90831127921062&w=2
- http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fpatches%2F106027&zone_32=411568%2A%20
- http://www.securityfocus.com/bid/294