CVE-1999-1025 Information

Description

CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user’s console session when the host is an NIS+ client which allows others with physical access to login with any string.

Reference

http://marc.info/?l=bugtraq&m=90831127921062&w=2 http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fpatches2F106027&zone_32=4115682A20 http://www.securityfocus.com/bid/294