CVE-1999-1432

Published Jul 16, 1998

Last updated 3 months ago

CVSS info 7.5

Overview

Description: Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is restoring, which could lead to increased privileges.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1F881110-7B54-49DA-B23A-710273430C44"
          },
          {
            "criteria": "cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "200D8CB2-0D52-40A8-9CD9-6E4513605201"
          },
          {
            "criteria": "cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "54AF87E4-52A4-44CA-B48E-A5BB139E6410"
          },
          {
            "criteria": "cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F66BAF35-A8B9-4E95-B270-444206FDD35B"
          },
          {
            "criteria": "cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "34EBF074-78C8-41AF-88F1-DA6726E56F8B"
          },
          {
            "criteria": "cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "369207B4-96FA-4324-9445-98FAE8ECF5DB"
          },
          {
            "criteria": "cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"
          },
          {
            "criteria": "cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5B72953B-E873-4E44-A3CF-12D770A0D416"
          },
          {
            "criteria": "cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "39F847DB-65A9-47DA-BCFA-A179E5E2301A"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 2.0

Weaknesses

Social media

Configurations

References