Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Recoverym4N

#38733de 53,625
7.2CVSS total
Vulnerabilidades · 1
PT-2009-6303
7.2
2009-12-01
Gnu · Grub · CVE-2009-4128
**Name of the Vulnerable Software and Affected Versions** GNU GRand Unified Bootloader (GRUB) 2 version 1.97 **Description** The issue allows physically proximate attackers to conduct brute force attacks and bypass authentication by submitting a password whose length is 1, as the software only compares the submitted portion of a password with the actual password. **Recommendations** For GNU GRand Unified Bootloader (GRUB) 2 version 1.97, consider using a different authentication mechanism or increasing the minimum password length to mitigate the risk of brute force attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.