VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 16, 1998· Updated Apr 16, 2026

CVE-1999-1432

CVE-1999-1432

Description

Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is restoring, which could lead to increased privileges.

Affected products

9
  • Sun Corporation/Solaris5 versions
    cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*+ 4 more
    • cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*
    • cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*
    • cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*
    • cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*
    • cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*
  • Sun Corporation/Sunos4 versions
    cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*
    • cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*
    • cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*
    • cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.