McAfee SafeBoot设备加密密码泄漏漏洞

CNCAN ID：CNCAN-2008092310 McAfee SafeBoot Device是一款加密和存取控制相关的安全解决方案。 McAfee SafeBoot设备加密密码检查处理程序不正确过滤读取密码后的BIOS键盘缓冲区，本地攻击者可以利用漏洞获得明文密码信息。 SafeBoot的预启动验证处理程序使用BIOS API读取通过键盘的用户输入，BIOS内部拷贝RAM结构称为BIOS键盘缓冲区中的击键到BIOS数据区域中，在使用后此缓冲区没有被清空刷新，可导致OS成功启动后，攻击者访问0x40:0x1e物理内存位置而获得密码信息。 0 SafeBoot 4 SafeBoot...

Microsoft BitLocker密码泄漏漏洞

CNCAN ID：CNCAN-2008090201 Microsoft BitLocker是一款微软开发的驱动器上进行完整卷加密，为数据提供额外的安全保护的应用程序。 Microsoft BitLocker存在设计问题，本地攻击者可以利用漏洞获得敏感信息。 Bitlocker预启动验证函数使用BIOS API读取通过用户的键盘输入，BIOS内部拷贝RAM结构中的击键，所谓的BIOS数据区中的BIOS键盘缓冲区。这个缓冲区在使用后没有被刷新，一旦操作系统完全重新引导可能导致敏感密码泄漏，这里假定攻击者可以在物理内存地址0x40:0x1e处读取密码。 Microsoft Windows...

BIOS Info (SSH)

Using SMBIOS and UEFI, it was possible to get BIOS info. TRUSTED...

Intel System Management Mode Local Privilege Escalation (INTEL-SA-00017)

The version of the Intel BIOS on the remote host is known to be vulnerable to an as-yet unspecified privilege escalation attack. It would allow a local user with administrative privileges to upgrade administrative privileges to System Management Mode. C Tenable Network Security, Inc...

BIOS Info (SMB)

It is possible to get information about the BIOS via the host's SMB interface. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34097; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/06/11"; scriptnameenglish:"BIOS Info SMB";...

BIOS Info (WMI)

Binary data biosgetinfowmi.nbin...

Design/Logic Flaw

HP firmware 68DTT F.0D stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer, aka SSRT080104...

CVE-2008-3902

HP firmware 68DTT F.0D stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer, aka SSRT080104...

CVE-2008-3902

HP firmware 68DTT F.0D stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer, aka SSRT080104...

CVE-2008-3902

CVE-2008-3902 affects HP firmware 68DTT F.0D. The vulnerability arises because pre-boot authentication passwords are stored in the BIOS Keyboard buffer and the buffer is not cleared after use, allowing local users to read sensitive information from memory locations associated with this buffer. Th...

Design/Logic Flaw

Intel firmware PE94510M.86A.0050.2007.0710.1559 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

Design/Logic Flaw

LILO 22.6.1 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

Design/Logic Flaw

IBM Lenovo firmware 7CETB5WW 2.05 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-3896

Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

Design/Logic Flaw

TrueCrypt 5.0 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer. NOTE: the researcher mentions a...

Design/Logic Flaw

Software suspend 2 2-2.2.1, when used with the Linux kernel 2.6.16, stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this...

Design/Logic Flaw

Secu Star DriveCrypt Plus Pack 3.9 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

Buffer overflow

Microsoft Bitlocker in Windows Vista before SP1 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer during boot, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-3901

Software suspend 2 2-2.2.1, when used with the Linux kernel 2.6.16, stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this...

CVE-2008-3895

LILO 22.6.1 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...