PT-2005-4874 · Insyde · Insyde Bios

Publicado 2005-12-11 · Atualizado 2018-10-19 · CVE-2005-4175

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Insyde BIOS version V190

Description The issue allows local administrators or users to read the BIOS password directly from physical memory because the keyboard buffer is not cleared after reading the BIOS password during system startup.

Recommendations For Insyde BIOS version V190, consider clearing the keyboard buffer manually after entering the BIOS password as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2005-4175

Produtos afetados

Insyde Bios

Referências · 7

• http://ivizsecurity.com/preboot-patch.html · Nota
• http://securityfocus.com/bid/15751 · Nota
• http://ivizsecurity.com/research/preboot/preboot_whitepaper.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4175 · Nota de Segurança
• http://securityfocus.com/archive/1/419610/100/0/threaded · Nota
• http://kb.cert.org/vuls/id/847537 · Nota
• http://pulltheplug.org/users/endrazine/Bios.Information.Leakage.txt · Nota