[IVIZ-08-009] Grub Legacy Security Model bypass exploiting wrong BIOS API usage

----------------------------------------------------------------------- iViZ Security Advisory 08-009 25/08/2008 ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com...

Intel系统管理模式本地特权提升漏洞

BUGTRAQ ID:30823 CNCAN ID：CNCAN-2008082603 Intel System Management Mode是一款为便携式计算机的电源管理特征服务的解决方案。 Intel BIOS存在一个未明安全问题，运行在管理员ring0权限下的软件在部分条件下可更改运行在SMM下的代码。 SMM是运行与OS控制之外的特权操作环境，恶意用户利用漏洞可修改运行在SMM中的软件，执行各种操作。要利用此漏洞需要攻击者拥有管理级别特权。目前没有详细漏洞细节提供。 受影响产品包括： DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL,...

[IVIZ-08-006] DiskCryptor Security Model bypass exploiting wrong BIOS API usage

----------------------------------------------------------------------- iViZ Security Advisory 08-006 25/08/2008 ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com...

Intel® Desktop and Intel® Mobile Boards Privilege Escalation

Summary: Software running administrative ring 0 privilege can under certain circumstances change code running in System Management Mode. Description: A new BIOS update is available for select Intel desktop motherboards to ensure proper configuration settings. This change would prevent a malicious...

Intel Keyboard Buffer Information Disclosure Vulnerability

Summary: Specific Intel BIOS's fail to sanitize user input entered during the Power On Self Test, POST, process. Under certain situations this issue could potentially result in a disclosure of information. Description: A new BIOS is available on select Intel motherboards to ensure proper...

Fedora 8 : kvm-60-6.fc8 (2008-4604)

Tue May 27 2008 Glauber Costa - 60-6.fc8 - Fix Cirrus heap overflow vulnerability 448524 - Fri May 23 2008 Daniel P. Berrange - 60-5.fc8 - Put PTY in rawmode - Fri May 16 2008 Glauber Costa - 60-4.fc8 - Fix problem with cirrus device that was breaking vnc connections rhbz 446830 - Wed Feb 27 2008...

Authentication flaw

Unspecified vulnerability in the BIOS F.26 and earlier for the HP Compaq Notebook PC allows physically proximate attackers to obtain privileged access via unspecified vectors, possibly involving an authentication bypass of the power-on password...

CVE-2008-0211

Unspecified vulnerability in the BIOS F.04 through F.11 for the HP Compaq Business Notebook PC allows local users to cause a denial of service via unspecified vectors...

CVE-2008-0706

Unspecified vulnerability in the BIOS F.26 and earlier for the HP Compaq Notebook PC allows physically proximate attackers to obtain privileged access via unspecified vectors, possibly involving an authentication bypass of the power-on password...

Code injection

Unspecified vulnerability in the BIOS F.04 through F.11 for the HP Compaq Business Notebook PC allows local users to cause a denial of service via unspecified vectors...

CVE-2008-0211

CVE-2008-0211 affects HP Compaq Business Notebook PC BIOS F.04–F.11. Local users may cause a DoS via unspecified vectors. The security bulletin HP-SSRT-080004 (HPSBGN02305) lists affected BIOS versions and corresponding updates across multiple notebook series (e.g., 2210, 2510, 2710, 6510/6710/67...

CVE-2008-0211

Unspecified vulnerability in the BIOS F.04 through F.11 for the HP Compaq Business Notebook PC allows local users to cause a denial of service via unspecified vectors...

CVE-2008-0706

Unspecified vulnerability in the BIOS F.26 and earlier for the HP Compaq Notebook PC allows physically proximate attackers to obtain privileged access via unspecified vectors, possibly involving an authentication bypass of the power-on password...

CVE-2008-0706

The information across connected sources confirms CVE-2008-0706 affects HP Compaq Notebook PC BIOS versions F.26 and earlier (notably Compaq Presario C700, HP G7000, and Compaq Presario A900). The root cause is a BIOS vulnerability allowing local, physically proximate attackers to gain privileged...

HP notebooks multiple security vulnerabilities

BIOS vulnerabilities allows unauthorized access and DoS...

[security bulletin] HPSBGN02319 SSRT080027 rev.1 - HP Compaq Notebook PC BIOS, Local Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01393763 Version: 1 HPSBGN02319 SSRT080027 rev.1 - HP Compaq Notebook PC BIOS, Local Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

[security bulletin] HPSBGN02305 SSRT080004 rev.1 - HP Compaq Business Notebook PC BIOS, Local Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01327854 Version: 1 HPSBGN02305 SSRT080004 rev.1 - HP Compaq Business Notebook PC BIOS, Local Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon ...

Netizen summed up the Vista crack method pooled-vulnerability warning-the black bar safety net

Listed below the users a summary of various crack vista method, according to the appearing time order. 1. The Replace method Principle: with the replacement of vista with some license file way to use the beta serial number to activate vista, is the earliest way to Disadvantages: the license becom...

[SECURITY] Fedora 7 Update: bochs-2.3-7.fc7

Bochs is a portable x86 PC emulation software package that emulates enough of the x86 CPU, related AT hardware, and BIOS to run DOS, Windows '95, Minix 2.0, and other OS's, all on your workstation...

Easily crack open the Lost Password laptop-vulnerability warning-the black bar safety net

For laptops, it is best not easily set a password, because the laptop's boot password is not like a PC that stored in CMOS circuit can through the discharge clear, at the moment a new laptop is the password stored on the motherboard of a few blocks of the logic circuit, our personal is not...