CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string.
References
Link | Resource |
---|---|
http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fpatches%2F106027&zone_32=411568%2A%20 | Patch Vendor Advisory |
http://www.securityfocus.com/bid/294 | Patch Vendor Advisory |
http://marc.info/?l=bugtraq&m=90831127921062&w=2 |
Configurations
Configuration 1 (hide)
|
Information
Published : 1998-11-11 21:00
Updated : 2018-10-30 09:25
NVD link : CVE-1999-1025
Mitre link : CVE-1999-1025
JSON object : View
CWE
Products Affected
sun
- solaris
- sunos