CVE-2008-3897

The vulnerability CVE-2008-3897 affects DiskCryptor 0.2.6 on Windows. The root cause is that pre-boot authentication passwords are stored in the BIOS keyboard buffer and the buffer is not cleared before or after use, allowing local users to read sensitive information from memory. Impact is partia...

CVE-2008-3897

DiskCryptor 0.2.6 on Windows stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-3896

Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-3893

Microsoft Bitlocker in Windows Vista before SP1 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer during boot, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-3899

CVE-2008-3899 concerns TrueCrypt 5.0, where pre-boot authentication passwords are stored in the BIOS keyboard buffer and not cleared before/after use. This allows local users to read memory locations associated with that buffer and potentially obtain sensitive information. The vulnerability is ro...

CVE-2008-3895

LILO 22.6.1 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-3898

Secu Star DriveCrypt Plus Pack 3.9 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-3901

Software suspend 2 2-2.2.1, when used with the Linux kernel 2.6.16, stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this...

CVE-2008-3894

CVE-2008-3894 : IBM/Lenovo firmware 7CETB5WW 2.05 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear the buffer after use, allowing local users to read sensitive information from physical memory. The root cause is improper handling of the pre-boot password in ...

CVE-2008-3896

Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-3895

Removed by vendor...

CVE-2008-3893

Microsoft Bitlocker in Windows Vista before SP1 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer during boot, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-3895

CVE-2008-3895 affects the LILO boot loader (22.6.1 and earlier). The vulnerability arises because pre-boot authentication passwords are stored in the BIOS Keyboard buffer and this buffer is not cleared before/after use, allowing local users to read the physical memory locations and recover sensit...

CVE-2008-3898

CVE-2008-3898 affects Secu Star DriveCrypt Plus Pack 3.9. Local attackers can read pre-boot authentication passwords stored in the BIOS keyboard buffer because the buffer is not cleared before/after use, enabling partial disclosure of sensitive data via memory locations associated with that buffe...

CVE-2008-3894

IBM Lenovo firmware 7CETB5WW 2.05 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-3901

The CVE-2008-3901 entry concerns Software suspend 2 (versions 2-2.2.1) used with Linux kernel 2.6.16, where pre-boot authentication passwords are stored in the BIOS Keyboard buffer and the buffer is not cleared after use. This allows local attackers to read sensitive data from physical memory loc...

CVE-2008-3893

Microsoft Bitlocker in Windows Vista (versions prior to SP1 ) contains a vulnerability where pre-boot authentication passwords are stored in the BIOS Keyboard buffer . Because this buffer is not cleared during the boot process, local users can obtain sensitive information by reading the associate...

CVE-2008-3896

CVE-2008-3896 affects Grub Legacy 0.97 and earlier, where pre-boot authentication passwords are stored in the BIOS Keyboard buffer and not cleared before/after use, enabling local users to read sensitive information from memory. Impact is partial confidentiality ; no exploitation details are prov...

PT-2008-5228 · Microsoft · Windows Vista

Name of the Vulnerable Software and Affected Versions: Windows Vista versions prior to SP1 Description: The issue allows local users to obtain sensitive information by reading physical memory locations associated with the BIOS Keyboard buffer, which stores pre-boot authentication passwords. This...

[IVIZ-08-003] TrueCrypt Security Model bypass exploiting wrong BIOS API usage

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- iViZ Security Advisory 08-003 25/08/2008 - ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com -...