CVE-2008-3894

IBM Lenovo firmware 7CETB5WW 2.05 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-3896

CVE-2008-3896 affects Grub Legacy 0.97 and earlier, where pre-boot authentication passwords are stored in the BIOS Keyboard buffer and not cleared before/after use, enabling local users to read sensitive information from memory. Impact is partial confidentiality ; no exploitation details are prov...

CVE-2008-3898

CVE-2008-3898 affects Secu Star DriveCrypt Plus Pack 3.9. Local attackers can read pre-boot authentication passwords stored in the BIOS keyboard buffer because the buffer is not cleared before/after use, enabling partial disclosure of sensitive data via memory locations associated with that buffe...

PT-2008-5228 · Microsoft · Windows Vista

Name of the Vulnerable Software and Affected Versions: Windows Vista versions prior to SP1 Description: The issue allows local users to obtain sensitive information by reading physical memory locations associated with the BIOS Keyboard buffer, which stores pre-boot authentication passwords. This...

[IVIZ-08-002] Hewlett-Packard BIOS Plain Text Password Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- iViZ Security Advisory 08-002 25/08/2008 - ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com -...

[IVIZ-08-005] IBM Lenovo BIOS Plain Text Password Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- iViZ Security Advisory 08-005 25/08/2008 - ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com -...