2.1

CVE-2008-3899

EPSS 0.32%
Veröffentlicht 03.09.2008 14:12:00
Zuletzt bearbeitet 16.06.2026 22:56:46
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

TrueCrypt 5.0 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.  NOTE: the researcher mentions a response from the vendor denying the vulnerability.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Truecrypt Foundation ≫ Truecrypt Version5.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.32%	0.231

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.ivizsecurity.com/preboot-patch.html

http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf

http://securityreason.com/securityalert/4203

http://www.securityfocus.com/archive/1/495805/100/0/threaded

https://nvd.nist.gov/vuln/detail/CVE-2008-3899

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-3899

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-3899

EUVD