## Description

CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### sun - solaris

Affected Versions:

- 2.6

### sun - sunos

Affected Versions:

- -

### sun - sunos

Affected Versions:

- 5.6

## References

- http://marc.info/?l=bugtraq&m=90831127921062&w=2
- http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fpatches%2F106027&zone_32=411568%2A%20
  Patch Vendor Advisory
- http://www.securityfocus.com/bid/294
  Patch Vendor Advisory
- http://marc.info/?l=bugtraq&m=90831127921062&w=2
- http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fpatches%2F106027&zone_32=411568%2A%20
  Patch Vendor Advisory
- http://www.securityfocus.com/bid/294
  Patch Vendor Advisory

Neural Processor Active