CVE-1999-1432 - Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is restoring, which could lead to increased privileges

Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is restoring, which could lead to increased privileges

Published Mar 9, 2002

No CVSS score

EPSS 2.09%

Description

Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is restoring, which could lead to increased privileges.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://marc.info/?l=bugtraq&m=90221104525997&w=2
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/160
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1413
Advisory

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=90221104525997&w=2		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/160		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1413		Advisory