Description
CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string.
References
- 19981012 Annoying Solaris/CDE/NIS+ bug mailing-list
- 4115685 issue-tracking
- 294 vdb-entry