2.1

CVE-2008-3895

Exploit
LILO 22.6.1 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lilo ≫ Lilo Version <= 22.6.1
Lilo ≫ Lilo Version 0
Lilo ≫ Lilo Version 1
Lilo ≫ Lilo Version 2
Lilo ≫ Lilo Version 3
Lilo ≫ Lilo Version 4
Lilo ≫ Lilo Version 5
Lilo ≫ Lilo Version 6
Lilo ≫ Lilo Version 7
Lilo ≫ Lilo Version 8
Lilo ≫ Lilo Version 9
Lilo ≫ Lilo Version 10
Lilo ≫ Lilo Version 11
Lilo ≫ Lilo Version 12
Lilo ≫ Lilo Version 13
Lilo ≫ Lilo Version 14
Lilo ≫ Lilo Version 15
Lilo ≫ Lilo Version 16
Lilo ≫ Lilo Version 17
Lilo ≫ Lilo Version 18
Lilo ≫ Lilo Version 19
Lilo ≫ Lilo Version 20
Lilo ≫ Lilo Version 21
Lilo ≫ Lilo Version 21-3
Lilo ≫ Lilo Version 21.4.2
Lilo ≫ Lilo Version 21.4.3
Lilo ≫ Lilo Version 21.4.4
Lilo ≫ Lilo Version 21.5
Lilo ≫ Lilo Version 21.5.1
Lilo ≫ Lilo Version 21.6
Lilo ≫ Lilo Version 21.6.1
Lilo ≫ Lilo Version 21.7
Lilo ≫ Lilo Version 21.7.1
Lilo ≫ Lilo Version 21.7.2
Lilo ≫ Lilo Version 21.7.3
Lilo ≫ Lilo Version 21.7.4
Lilo ≫ Lilo Version 21.7.5
Lilo ≫ Lilo Version 22.0
Lilo ≫ Lilo Version 22.0.1
Lilo ≫ Lilo Version 22.0.2
Lilo ≫ Lilo Version 22.1
Lilo ≫ Lilo Version 22.2
Lilo ≫ Lilo Version 22.3
Lilo ≫ Lilo Version 22.3.1
Lilo ≫ Lilo Version 22.3.2
Lilo ≫ Lilo Version 22.3.3
Lilo ≫ Lilo Version 22.3.4
Lilo ≫ Lilo Version 22.4
Lilo ≫ Lilo Version 22.4.1
Lilo ≫ Lilo Version 22.5
Lilo ≫ Lilo Version 22.5.1
Lilo ≫ Lilo Version 22.5.2
Lilo ≫ Lilo Version 22.5.3
Lilo ≫ Lilo Version 22.5.3.1
Lilo ≫ Lilo Version 22.5.4
Lilo ≫ Lilo Version 22.5.5
Lilo ≫ Lilo Version 22.5.6
Lilo ≫ Lilo Version 22.5.7
Lilo ≫ Lilo Version 22.5.7.2
Lilo ≫ Lilo Version 22.5.8
Lilo ≫ Lilo Version 22.5.9
Lilo ≫ Lilo Version 22.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.41% 0.328
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.ivizsecurity.com/preboot-patch.html
http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf
Exploit
http://securityreason.com/securityalert/4211
http://www.securityfocus.com/archive/1/495801/100/0/threaded