## Description

Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is restoring, which could lead to increased privileges.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### sun - solaris

Affected Versions:

- 2.4

### sun - solaris

Affected Versions:

- 2.5

### sun - solaris

Affected Versions:

- 2.5.1

### sun - solaris

Affected Versions:

- 2.5.1

### sun - solaris

Affected Versions:

- 2.6

### sun - sunos

Affected Versions:

- -

### sun - sunos

Affected Versions:

- 5.4

### sun - sunos

Affected Versions:

- 5.5

### sun - sunos

Affected Versions:

- 5.5.1

## References

- http://marc.info/?l=bugtraq&m=90221104525997&w=2
- http://www.securityfocus.com/bid/160
- http://marc.info/?l=bugtraq&m=90221104525997&w=2
- http://www.securityfocus.com/bid/160

Neural Processor Active