CVE-2009-3432: Unspecified vulnerability in xscreensaver in Sun Solaris 10, and OpenSolaris before snv_112, when Xorg or X...

Security readout for executives and security teams

This issue could let someone with physical access see information on a locked Solaris desktop screen. It depends on xscreensaver with Xorg or Xnewt and RandR enabled. The public bundle does not provide a CVSS score or detailed fix text, so urgency depends on whether affected workstations handle sensitive data. Most exposure is older Solaris or OpenSolaris graphical workstations, kiosks, labs, or shared terminals using xscreensaver with RandR enabled. Internet-facing servers are unlikely to be directly affected unless they provide physically reachable graphical sessions. Treat as a workstation physical-security issue, not a broad remote compromise. Prioritize sensitive shared terminals, lab systems, operations consoles, and unattended desktops before general legacy inventory cleanup. Mitigation focus: Check Sun Alert 249646 and patch document 120094-26-1 for vendor update guidance.; Identify and update OpenSolaris systems older than snv_112 where present.; Limit physical access to affected graphical Solaris systems..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.