7.5

CVE-1999-1432

Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is restoring, which could lead to increased privileges.

Data is provided by the National Vulnerability Database (NVD)
Sun ≫ Solaris Version2.4 Editionx86
Sun ≫ Solaris Version2.5 Editionx86
Sun ≫ Solaris Version2.5.1 Editionppc
Sun ≫ Solaris Version2.5.1 Editionx86
Sun ≫ Solaris Version2.6
Sun ≫ Sunos Version-
Sun ≫ Sunos Version5.4
Sun ≫ Sunos Version5.5
Sun ≫ Sunos Version5.5.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.05% 0.854
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P