2.1
CVE-2008-3896
- EPSS 0.07%
- Veröffentlicht 03.09.2008 14:12:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnu ≫ Grub Legacy Version <= 0.97
Gnu ≫ Grub Legacy Version0.92
Gnu ≫ Grub Legacy Version0.93
Gnu ≫ Grub Legacy Version0.94
Gnu ≫ Grub Legacy Version0.94-i386-pc
Gnu ≫ Grub Legacy Version0.95
Gnu ≫ Grub Legacy Version0.95-i386-pc
Gnu ≫ Grub Legacy Version0.96
Gnu ≫ Grub Legacy Version0.96-i386-pc
Gnu ≫ Grub Legacy Version0.97-i386-pc
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.07% | 0.171 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.