CVE-1999-1025: Sun Solaris

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string.

Affected products

• Sun Solaris: version 2.6 only
• Sun Sunos: affected versions not specified; version 5.6 only

Published 1998-11-12. Last modified 2026-06-16.