Vulnerability in Sun Solaris

CVE-1999-1025

CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string.

EPSS: 0.004 (27.7th percentile) — read the EPSS interpretation.

Affected products

Sun Solaris — versions 2.6
Sun Sunos — versions 5.6
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (issue-tracking, Patch, Vendor Advisory, x_refsource_SUNBUG)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)