CVE-1999-1432

High CVSS 7.5

Published 1998-07-16 · last changed 2026-06-16

The fix

We hold no Microsoft remediation data for CVE-1999-1432, which normally means it is not a Windows CVE. For non-Microsoft software the fix is the vendor's own updated release, and the affected versions are listed below.

What it is

Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is restoring, which could lead to increased privileges.

Sources

NVD record for CVE-1999-1432

CVSS vector: AV:N/AC:L/Au:N/C:P/I:P/A:P