CVE-1999-1297
CVSS 2.0 Score 2.1 of 10 (low)
Details
Summary
CVE-1999-1297 is a vulnerability affecting cmdtool in OpenWindows 3.0 and XView 3.0 on SunOS 4.1.4 and earlier. This issue grants attackers with physical access to the system the ability to view unechoed characters, including those from password prompts, using the L2/AGAIN key. This poses a significant security risk, especially for systems with sensitive information that require strong authentication measures. Attackers can bypass the normal masking of passwords, potentially gaining unauthorized access to user accounts and compromising system security. It is crucial for administrators to update their systems to mitigate this vulnerability and enhance overall cybersecurity protections.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- SunOS
Affected Vendors
- Oracle Corp