CVE-1999-1025
MediumExploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
The CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, allowing others with physical access to log in with any string.
Risk Assessment
The risk is that unauthorized individuals may gain access to a user's session, potentially leading to data breaches or unauthorized actions within the system.
Recommendation
It is recommended to update the system to a newer version that fixes the screen lock mechanism or to implement additional security measures to restrict physical access to the server.
Original NVD description (English source)
CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string.