PT-2009-2769 · Intel · Intel Txt

Joanna Rutkowska · Publicado 2009-01-07 · Atualizado 2009-01-08 · CVE-2009-0066

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intel system software for Trusted Execution Technology (TXT) (affected versions not specified)

Description The issue allows attackers to bypass intended loader integrity protections. This is demonstrated by exploitation of tboot. As of the given date, the only disclosure is a vague pre-advisory with no actionable information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2009-0066

Produtos afetados

Intel Txt

Referências · 5

• http://theinvisiblethings.blogspot.com/2009/01/attacking-intel-trusted-execution.html · Nota
• http://securityfocus.com/bid/33119 · Nota
• http://invisiblethingslab.com/press/itl-press-2009-01.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0066 · Nota de Segurança
• http://blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Wojtczuk · Nota