CVE-2008-3895

CVE-2008-3895 affects the LILO boot loader (22.6.1 and earlier). The vulnerability arises because pre-boot authentication passwords are stored in the BIOS Keyboard buffer and this buffer is not cleared before/after use, allowing local users to read the physical memory locations and recover sensit...

CVE-2008-3895

Removed by vendor...

CVE-2008-3896

Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-3896

Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-3899

CVE-2008-3899 concerns TrueCrypt 5.0, where pre-boot authentication passwords are stored in the BIOS keyboard buffer and not cleared before/after use. This allows local users to read memory locations associated with that buffer and potentially obtain sensitive information. The vulnerability is ro...

CVE-2008-3895

LILO 22.6.1 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

PT-2008-5228 · Microsoft · Windows Vista

Name of the Vulnerable Software and Affected Versions: Windows Vista versions prior to SP1 Description: The issue allows local users to obtain sensitive information by reading physical memory locations associated with the BIOS Keyboard buffer, which stores pre-boot authentication passwords. This...

Grub, DiskCryptor, LILO, DriveCrypt, TrueCRYPT and Intel, IBM, HP BIOS disk ebcryption utilities information leak

Cleartext password is not erased from BIOS data buffer...

[IVIZ-08-002] Hewlett-Packard BIOS Plain Text Password Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- iViZ Security Advisory 08-002 25/08/2008 - ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com -...

[IVIZ-08-005] IBM Lenovo BIOS Plain Text Password Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- iViZ Security Advisory 08-005 25/08/2008 - ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com -...

[IVIZ-08-004] Intel BIOS Plain Text Password Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- iViZ Security Advisory 08-004 25/08/2008 - ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com -...

[IVIZ-08-007] DriveCrypt Security Model bypass exploiting wrong BIOS API usage

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- iViZ Security Advisory 08-007 25/08/2008 - ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com -...

[IVIZ-08-008] LILO Security Model bypass exploiting wrong BIOS API usage

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- iViZ Security Advisory 08-008 25/08/2008 - ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com -...

[IVIZ-08-003] TrueCrypt Security Model bypass exploiting wrong BIOS API usage

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- iViZ Security Advisory 08-003 25/08/2008 - ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com -...

Intel系统管理模式本地特权提升漏洞

BUGTRAQ ID:30823 CNCAN ID：CNCAN-2008082603 Intel System Management Mode是一款为便携式计算机的电源管理特征服务的解决方案。 Intel BIOS存在一个未明安全问题，运行在管理员ring0权限下的软件在部分条件下可更改运行在SMM下的代码。 SMM是运行与OS控制之外的特权操作环境，恶意用户利用漏洞可修改运行在SMM中的软件，执行各种操作。要利用此漏洞需要攻击者拥有管理级别特权。目前没有详细漏洞细节提供。 受影响产品包括： DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL,...

[IVIZ-08-006] DiskCryptor Security Model bypass exploiting wrong BIOS API usage

----------------------------------------------------------------------- iViZ Security Advisory 08-006 25/08/2008 ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com...

[IVIZ-08-009] Grub Legacy Security Model bypass exploiting wrong BIOS API usage

----------------------------------------------------------------------- iViZ Security Advisory 08-009 25/08/2008 ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com...

Intel Keyboard Buffer Information Disclosure Vulnerability

Summary: Specific Intel BIOS's fail to sanitize user input entered during the Power On Self Test, POST, process. Under certain situations this issue could potentially result in a disclosure of information. Description: A new BIOS is available on select Intel motherboards to ensure proper...

Intel® Desktop and Intel® Mobile Boards Privilege Escalation

Summary: Software running administrative ring 0 privilege can under certain circumstances change code running in System Management Mode. Description: A new BIOS update is available for select Intel desktop motherboards to ensure proper configuration settings. This change would prevent a malicious...

Fedora 8 : kvm-60-6.fc8 (2008-4604)

Tue May 27 2008 Glauber Costa - 60-6.fc8 - Fix Cirrus heap overflow vulnerability 448524 - Fri May 23 2008 Daniel P. Berrange - 60-5.fc8 - Put PTY in rawmode - Fri May 16 2008 Glauber Costa - 60-4.fc8 - Fix problem with cirrus device that was breaking vnc connections rhbz 446830 - Wed Feb 27 2008...