CVE-2009-4128

GNU GRand Unified Bootloader GRUB 2 1.97 only compares the submitted portion of a password with the actual password, which makes it easier for physically proximate attackers to conduct brute force attacks and bypass authentication by submitting a password whose length is 1...

CVE-2009-4128

CVE-2009-4128 affects GRUB 2 (1.97) and allows authentication bypass by feeding a 1-character password because GRUB 2 did not properly validate the entire password. Affected systems could be exploited by an attacker with physical access to perform a local brute-force attack. Ubuntu's USN-868-1 an...