CVE-1999-1432: Sun Solaris

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is restoring, which could lead to increased privileges.

Affected products

• Sun Solaris: version 2.4 only; version 2.5 only; version 2.5.1 only; version 2.6 only
• Sun Sunos: affected versions not specified; version 5.4 only; version 5.5 only; version 5.5.1 only

Published 1998-07-16. Last modified 2026-06-16.