CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string.
References
Link | Resource |
---|---|
http://marc.info/?l=bugtraq&m=90831127921062&w=2 | |
http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fpatches%2F106027&zone_32=411568%2A%20 | Patch Vendor Advisory |
http://www.securityfocus.com/bid/294 | Patch Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2001-09-12T04:00:00
Updated: 2016-10-17T13:57:01
Reserved: 2001-08-31T00:00:00
Link: CVE-1999-1025
JSON object: View
NVD Information
Status : Modified
Published: 1998-11-12T05:00:00.000
Modified: 2018-10-30T16:25:26.310
Link: CVE-1999-1025
JSON object: View
Redhat Information
No data.
CWE