high7.5Public exploit code
CVE-1999-1432
Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attac…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sun Solaris 2.6 - power management1998-07-16 · local · solaris · Verified
Impact
Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is restoring, which could lead to increased privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Solaris | Versions 2.4, 2.5, 2.5.1, 2.6 |
| Sun | Sunos | All versions Versions 5.4, 5.5, 5.5.1 |