| Vulnerability Name: | CVE-1999-1025 (CCN-7473) | ||||||||
| Assigned: | 1998-10-12 | ||||||||
| Published: | 1998-10-12 | ||||||||
| Updated: | 2018-10-30 | ||||||||
| Summary: | CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string. | ||||||||
| CVSS v3 Severity: | 5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 4.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: CCN Type: BugTraq Mailing List, Mon, 12 Oct 1998 19:37:21 -0400 Annoying Solaris/CDE/NIS+ bug Source: CCN Type: BugTraq Mailing List, 13 Oct 1998 13:59:58 Re: Annoying Solaris/CDE/NIS+ bug Source: MITRE Type: CNA CVE-1999-1025 Source: BUGTRAQ Type: UNKNOWN 19981012 Annoying Solaris/CDE/NIS+ bug Source: CCN Type: Sun Microsystems Bug ID 4115685 (from 106027-07) CDE screen lock not working properly for nis+ users (refix) Source: SUNBUG Type: Patch, Vendor Advisory 4115685 Source: CCN Type: OSVDB ID: 8669 Solaris CDE screenlock NIS+ Lock Failure Source: BID Type: Patch, Vendor Advisory 294 Source: CCN Type: BID-294 Solaris CDE/NIS+ screenlock Vulnerability Source: XF Type: UNKNOWN solaris-cde-nisplus-lock(7473) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||