Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Recoverym4N

#38151of 53,622
7.2Total CVSS
Vulnerabilities · 1
PT-2009-6303
7.2
2009-12-01
Gnu · Grub · CVE-2009-4128
**Name of the Vulnerable Software and Affected Versions** GNU GRand Unified Bootloader (GRUB) 2 version 1.97 **Description** The issue allows physically proximate attackers to conduct brute force attacks and bypass authentication by submitting a password whose length is 1, as the software only compares the submitted portion of a password with the actual password. **Recommendations** For GNU GRand Unified Bootloader (GRUB) 2 version 1.97, consider using a different authentication mechanism or increasing the minimum password length to mitigate the risk of brute force attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.