Vulnerability Description
Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is restoring, which could lead to increased privileges.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sun | Solaris | 2.4 |
| Sun | Sunos | - |
References
- http://marc.info/?l=bugtraq&m=90221104525997&w=2
- http://www.securityfocus.com/bid/160
- http://marc.info/?l=bugtraq&m=90221104525997&w=2
- http://www.securityfocus.com/bid/160
FAQ
What is CVE-1999-1432?
CVE-1999-1432 is a vulnerability with a CVSS score of 7.5 (HIGH). Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input charact...
How severe is CVE-1999-1432?
CVE-1999-1432 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-1999-1432?
Check the references section above for vendor advisories and patch information. Affected products include: Sun Solaris, Sun Sunos.