2.1

CVE-2008-3895

Exploit
LILO 22.6.1 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lilo ≫ Lilo Version <= 22.6.1
Lilo ≫ Lilo Version0
Lilo ≫ Lilo Version1
Lilo ≫ Lilo Version2
Lilo ≫ Lilo Version3
Lilo ≫ Lilo Version4
Lilo ≫ Lilo Version5
Lilo ≫ Lilo Version6
Lilo ≫ Lilo Version7
Lilo ≫ Lilo Version8
Lilo ≫ Lilo Version9
Lilo ≫ Lilo Version10
Lilo ≫ Lilo Version11
Lilo ≫ Lilo Version12
Lilo ≫ Lilo Version13
Lilo ≫ Lilo Version14
Lilo ≫ Lilo Version15
Lilo ≫ Lilo Version16
Lilo ≫ Lilo Version17
Lilo ≫ Lilo Version18
Lilo ≫ Lilo Version19
Lilo ≫ Lilo Version20
Lilo ≫ Lilo Version21
Lilo ≫ Lilo Version21-3
Lilo ≫ Lilo Version21.4.2
Lilo ≫ Lilo Version21.4.3
Lilo ≫ Lilo Version21.4.4
Lilo ≫ Lilo Version21.5
Lilo ≫ Lilo Version21.5.1
Lilo ≫ Lilo Version21.6
Lilo ≫ Lilo Version21.6.1
Lilo ≫ Lilo Version21.7
Lilo ≫ Lilo Version21.7.1
Lilo ≫ Lilo Version21.7.2
Lilo ≫ Lilo Version21.7.3
Lilo ≫ Lilo Version21.7.4
Lilo ≫ Lilo Version21.7.5
Lilo ≫ Lilo Version22.0
Lilo ≫ Lilo Version22.0.1
Lilo ≫ Lilo Version22.0.2
Lilo ≫ Lilo Version22.1
Lilo ≫ Lilo Version22.2
Lilo ≫ Lilo Version22.3
Lilo ≫ Lilo Version22.3.1
Lilo ≫ Lilo Version22.3.2
Lilo ≫ Lilo Version22.3.3
Lilo ≫ Lilo Version22.3.4
Lilo ≫ Lilo Version22.4
Lilo ≫ Lilo Version22.4.1
Lilo ≫ Lilo Version22.5
Lilo ≫ Lilo Version22.5.1
Lilo ≫ Lilo Version22.5.2
Lilo ≫ Lilo Version22.5.3
Lilo ≫ Lilo Version22.5.3.1
Lilo ≫ Lilo Version22.5.4
Lilo ≫ Lilo Version22.5.5
Lilo ≫ Lilo Version22.5.6
Lilo ≫ Lilo Version22.5.7
Lilo ≫ Lilo Version22.5.7.2
Lilo ≫ Lilo Version22.5.8
Lilo ≫ Lilo Version22.5.9
Lilo ≫ Lilo Version22.6
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0.168
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.