PT-2005-4875 · Award · Award Bios Modular

Publicado 2005-12-11 · Atualizado 2018-10-19 · CVE-2005-4176

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions AWARD Bios Modular version 4.50pg

Description The issue concerns the failure to clear the keyboard buffer after reading the BIOS password during system startup. This allows local administrators or users to read the password directly from physical memory.

Recommendations For AWARD Bios Modular version 4.50pg, consider changing the BIOS password to a new, complex password and ensuring physical security of the system to minimize the risk of exploitation. Additionally, restrict access to the system's physical memory to prevent unauthorized password reading.

Exploit

Correção

Identificadores relacionados

CVE-2005-4176

Produtos afetados

Award Bios Modular

Referências · 9

• 🔥 https://exploit-db.com/exploits/26752 · Exploit
• 🔥 https://exploit-db.com/exploits/26753 · Exploit
• http://securityfocus.com/archive/1/419610/100/0/threaded · Nota
• http://pulltheplug.org/users/endrazine/Bios.Information.Leakage.txt · Nota
• http://ivizsecurity.com/preboot-patch.html · Nota
• http://securityfocus.com/bid/15751 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4176 · Nota de Segurança
• http://ivizsecurity.com/research/preboot/preboot_whitepaper.pdf · Nota
• http://kb.cert.org/vuls/id/847537 · Nota