CVE-2008-3896: Infoleak
First published: Wed Sep 03 2008(Updated: )
Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Gnu Grub Legacy | =0.96-i386-pc | |
| Gnu Grub Legacy | =0.94-i386-pc | |
| Gnu Grub Legacy | =0.96 | |
| Gnu Grub Legacy | =0.92 | |
| Gnu Grub Legacy | =0.95 | |
| Gnu Grub Legacy | =0.93 | |
| Gnu Grub Legacy | <=0.97 | |
| Gnu Grub Legacy | =0.95-i386-pc | |
| Gnu Grub Legacy | =0.97-i386-pc | |
| Gnu Grub Legacy | =0.94 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/gnu
- canonical/gnu grub legacy
- version/gnu grub legacy/0.96-i386-pc
- version/gnu grub legacy/0.94-i386-pc
- version/gnu grub legacy/0.96
- version/gnu grub legacy/0.92
- version/gnu grub legacy/0.95
- version/gnu grub legacy/0.93
- version/gnu grub legacy/0.97
- version/gnu grub legacy/0.95-i386-pc
- version/gnu grub legacy/0.97-i386-pc
- version/gnu grub legacy/0.94