CVE-2008-3896 Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive info...
LowCVSS 2.1
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU grub legacy | <= 0.97 | No fix listed |
| GNU grub legacy | = 0.92 | No fix listed |
| GNU grub legacy | = 0.93 | No fix listed |
| GNU grub legacy | = 0.94 | No fix listed |
| GNU grub legacy | = 0.94-i386-pc | No fix listed |
| GNU grub legacy | = 0.95 | No fix listed |
| GNU grub legacy | = 0.95-i386-pc | No fix listed |
| GNU grub legacy | = 0.96 | No fix listed |
| GNU grub legacy | = 0.96-i386-pc | No fix listed |
| GNU grub legacy | = 0.97-i386-pc | No fix listed |
| debian/grub(Debian:12) | All versions | No fix listed |
| debian/grub(Debian:12) | = 0.97-80 | No fix listed |
| debian/grub(Debian:12) | = 0.97-81 | No fix listed |
| debian/grub(Debian:12) | = 0.97-82 | No fix listed |
| debian/grub(Debian:12) | = 0.97-83 | No fix listed |
| debian/grub(Debian:12) | = 0.97-84 | No fix listed |
| debian/grub(Debian:13) | All versions | No fix listed |
| debian/grub(Debian:13) | = 0.97-84 | No fix listed |
References
- 4204 third-party-advisory
- 4206 third-party-advisory
- www.ivizsecurity.com
- www.ivizsecurity.com
- 20080825 [IVIZ-08-009] Grub Legacy Security Model bypass exploiting wrong BIOS API usage mailing-list
- Debian Security Tracker CVE-2008-3896 vendor-advisory