EUVD-2008-6979

Malware in sbrugna...

CVE-2008-7020

McAfee SafeBoot Device Encryption 4 build 4750 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-7020

McAfee SafeBoot Device Encryption 4 build 4750 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-7020

McAfee SafeBoot Device Encryption 4 build 4750 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, allowing local users to read sensitive information from memory locations associated with that buffer.

McAfee SafeBoot设备加密密码泄漏漏洞

CNCAN ID：CNCAN-2008092310 McAfee SafeBoot Device是一款加密和存取控制相关的安全解决方案。 McAfee SafeBoot设备加密密码检查处理程序不正确过滤读取密码后的BIOS键盘缓冲区，本地攻击者可以利用漏洞获得明文密码信息。 SafeBoot的预启动验证处理程序使用BIOS API读取通过键盘的用户输入，BIOS内部拷贝RAM结构称为BIOS键盘缓冲区中的击键到BIOS数据区域中，在使用后此缓冲区没有被清空刷新，可导致OS成功启动后，攻击者访问0x40:0x1e物理内存位置而获得密码信息。 0 SafeBoot 4 SafeBoot...