5760 matches found
[IVIZ-08-002] Hewlett-Packard BIOS Plain Text Password Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- iViZ Security Advisory 08-002 25/08/2008 - ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com -...
Grub, DiskCryptor, LILO, DriveCrypt, TrueCRYPT and Intel, IBM, HP BIOS disk ebcryption utilities information leak
Cleartext password is not erased from BIOS data buffer...
[IVIZ-08-005] IBM Lenovo BIOS Plain Text Password Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- iViZ Security Advisory 08-005 25/08/2008 - ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com -...
[IVIZ-08-004] Intel BIOS Plain Text Password Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- iViZ Security Advisory 08-004 25/08/2008 - ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com -...
[IVIZ-08-009] Grub Legacy Security Model bypass exploiting wrong BIOS API usage
----------------------------------------------------------------------- iViZ Security Advisory 08-009 25/08/2008 ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com...
[IVIZ-08-006] DiskCryptor Security Model bypass exploiting wrong BIOS API usage
----------------------------------------------------------------------- iViZ Security Advisory 08-006 25/08/2008 ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com...
Intel系统管理模式本地特权提升漏洞
BUGTRAQ ID:30823 CNCAN ID：CNCAN-2008082603 Intel System Management Mode是一款为便携式计算机的电源管理特征服务的解决方案。 Intel BIOS存在一个未明安全问题，运行在管理员ring0权限下的软件在部分条件下可更改运行在SMM下的代码。 SMM是运行与OS控制之外的特权操作环境，恶意用户利用漏洞可修改运行在SMM中的软件，执行各种操作。要利用此漏洞需要攻击者拥有管理级别特权。目前没有详细漏洞细节提供。 受影响产品包括： DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL,...
Intel® Desktop and Intel® Mobile Boards Privilege Escalation
Summary: Software running administrative ring 0 privilege can under certain circumstances change code running in System Management Mode. Description: A new BIOS update is available for select Intel desktop motherboards to ensure proper configuration settings. This change would prevent a malicious...
Intel Keyboard Buffer Information Disclosure Vulnerability
Summary: Specific Intel BIOS's fail to sanitize user input entered during the Power On Self Test, POST, process. Under certain situations this issue could potentially result in a disclosure of information. Description: A new BIOS is available on select Intel motherboards to ensure proper...
Fedora 8 : kvm-60-6.fc8 (2008-4604)
Tue May 27 2008 Glauber Costa - 60-6.fc8 - Fix Cirrus heap overflow vulnerability 448524 - Fri May 23 2008 Daniel P. Berrange - 60-5.fc8 - Put PTY in rawmode - Fri May 16 2008 Glauber Costa - 60-4.fc8 - Fix problem with cirrus device that was breaking vnc connections rhbz 446830 - Wed Feb 27 2008...
CVE-2008-0211
Unspecified vulnerability in the BIOS F.04 through F.11 for the HP Compaq Business Notebook PC allows local users to cause a denial of service via unspecified vectors...
Authentication flaw
Unspecified vulnerability in the BIOS F.26 and earlier for the HP Compaq Notebook PC allows physically proximate attackers to obtain privileged access via unspecified vectors, possibly involving an authentication bypass of the power-on password...
CVE-2008-0706
Unspecified vulnerability in the BIOS F.26 and earlier for the HP Compaq Notebook PC allows physically proximate attackers to obtain privileged access via unspecified vectors, possibly involving an authentication bypass of the power-on password...
Code injection
Unspecified vulnerability in the BIOS F.04 through F.11 for the HP Compaq Business Notebook PC allows local users to cause a denial of service via unspecified vectors...
CVE-2008-0211
Unspecified vulnerability in the BIOS F.04 through F.11 for the HP Compaq Business Notebook PC allows local users to cause a denial of service via unspecified vectors...
CVE-2008-0211
CVE-2008-0211 affects HP Compaq Business Notebook PC BIOS F.04–F.11. Local users may cause a DoS via unspecified vectors. The security bulletin HP-SSRT-080004 (HPSBGN02305) lists affected BIOS versions and corresponding updates across multiple notebook series (e.g., 2210, 2510, 2710, 6510/6710/67...
CVE-2008-0706
Unspecified vulnerability in the BIOS F.26 and earlier for the HP Compaq Notebook PC allows physically proximate attackers to obtain privileged access via unspecified vectors, possibly involving an authentication bypass of the power-on password...
CVE-2008-0706
The information across connected sources confirms CVE-2008-0706 affects HP Compaq Notebook PC BIOS versions F.26 and earlier (notably Compaq Presario C700, HP G7000, and Compaq Presario A900). The root cause is a BIOS vulnerability allowing local, physically proximate attackers to gain privileged...
[security bulletin] HPSBGN02319 SSRT080027 rev.1 - HP Compaq Notebook PC BIOS, Local Unauthorized Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01393763 Version: 1 HPSBGN02319 SSRT080027 rev.1 - HP Compaq Notebook PC BIOS, Local Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...