2.1
CVE-2008-3896
- EPSS 0.07%
- Published 03.09.2008 14:12:00
- Last modified 09.04.2025 00:30:58
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.
Data is provided by the National Vulnerability Database (NVD)
Gnu ≫ Grub Legacy Version <= 0.97
Gnu ≫ Grub Legacy Version0.92
Gnu ≫ Grub Legacy Version0.93
Gnu ≫ Grub Legacy Version0.94
Gnu ≫ Grub Legacy Version0.94-i386-pc
Gnu ≫ Grub Legacy Version0.95
Gnu ≫ Grub Legacy Version0.95-i386-pc
Gnu ≫ Grub Legacy Version0.96
Gnu ≫ Grub Legacy Version0.96-i386-pc
Gnu ≫ Grub Legacy Version0.97-i386-pc
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.07% | 0.171 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.