CVE-1999-1432

Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is restoring, which could lead to increased privileges.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.09% chance of exploitation in the next 30 days, 80th percentile

Published

2002-03-09

Updated

2024-08-01

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/19126

References

• CVE Record
• NVD entry

Related

• CVE-1999-1431
• CVE-1999-1433
• CVE-1999-1423
• CVE-1999-1434
• CVE-1999-1414
• CVE-1999-1436