Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    2 vulnerabilities found for grub_legacy by gnu

    CVE-2008-3896 (GCVE-0-2008-3896)

    Vulnerability from nvd – Published: 2008-09-03 14:00 – Updated: 2024-08-07 09:53
    VLAI
    Summary
    Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://www.securityfocus.com/archive/1/495726/100… mailing-listx_refsource_BUGTRAQ
    http://securityreason.com/securityalert/4206 third-party-advisoryx_refsource_SREASON
    http://www.ivizsecurity.com/preboot-patch.html x_refsource_MISC
    http://www.ivizsecurity.com/research/preboot/preb… x_refsource_MISC
    http://securityreason.com/securityalert/4204 third-party-advisoryx_refsource_SREASON
    Date Public
    2008-08-10 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T09:53:00.618Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20080825 [IVIZ-08-009] Grub Legacy Security Model bypass exploiting wrong BIOS API usage",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/495726/100/0/threaded"
          },
          {
            "name": "4206",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/4206"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.ivizsecurity.com/preboot-patch.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf"
          },
          {
            "name": "4204",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/4204"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-08-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20080825 [IVIZ-08-009] Grub Legacy Security Model bypass exploiting wrong BIOS API usage",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/495726/100/0/threaded"
        },
        {
          "name": "4206",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/4206"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.ivizsecurity.com/preboot-patch.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf"
        },
        {
          "name": "4204",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/4204"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-3896",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20080825 [IVIZ-08-009] Grub Legacy Security Model bypass exploiting wrong BIOS API usage",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/495726/100/0/threaded"
            },
            {
              "name": "4206",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/4206"
            },
            {
              "name": "http://www.ivizsecurity.com/preboot-patch.html",
              "refsource": "MISC",
              "url": "http://www.ivizsecurity.com/preboot-patch.html"
            },
            {
              "name": "http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf",
              "refsource": "MISC",
              "url": "http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf"
            },
            {
              "name": "4204",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/4204"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-3896",
    "datePublished": "2008-09-03T14:00:00.000Z",
    "dateReserved": "2008-09-03T00:00:00.000Z",
    "dateUpdated": "2024-08-07T09:53:00.618Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2008-3896 (GCVE-0-2008-3896)

    Vulnerability from cvelistv5 – Published: 2008-09-03 14:00 – Updated: 2024-08-07 09:53
    VLAI
    Summary
    Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://www.securityfocus.com/archive/1/495726/100… mailing-listx_refsource_BUGTRAQ
    http://securityreason.com/securityalert/4206 third-party-advisoryx_refsource_SREASON
    http://www.ivizsecurity.com/preboot-patch.html x_refsource_MISC
    http://www.ivizsecurity.com/research/preboot/preb… x_refsource_MISC
    http://securityreason.com/securityalert/4204 third-party-advisoryx_refsource_SREASON
    Date Public
    2008-08-10 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T09:53:00.618Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20080825 [IVIZ-08-009] Grub Legacy Security Model bypass exploiting wrong BIOS API usage",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/495726/100/0/threaded"
          },
          {
            "name": "4206",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/4206"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.ivizsecurity.com/preboot-patch.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf"
          },
          {
            "name": "4204",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/4204"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-08-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20080825 [IVIZ-08-009] Grub Legacy Security Model bypass exploiting wrong BIOS API usage",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/495726/100/0/threaded"
        },
        {
          "name": "4206",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/4206"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.ivizsecurity.com/preboot-patch.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf"
        },
        {
          "name": "4204",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/4204"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-3896",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20080825 [IVIZ-08-009] Grub Legacy Security Model bypass exploiting wrong BIOS API usage",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/495726/100/0/threaded"
            },
            {
              "name": "4206",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/4206"
            },
            {
              "name": "http://www.ivizsecurity.com/preboot-patch.html",
              "refsource": "MISC",
              "url": "http://www.ivizsecurity.com/preboot-patch.html"
            },
            {
              "name": "http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf",
              "refsource": "MISC",
              "url": "http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf"
            },
            {
              "name": "4204",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/4204"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-3896",
    "datePublished": "2008-09-03T14:00:00.000Z",
    "dateReserved": "2008-09-03T00:00:00.000Z",
    "dateUpdated": "2024-08-07T09:53:00.618Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}