PT-2005-4874 · Insyde · Insyde Bios

Published 2005-12-11 · Updated 2018-10-19 · CVE-2005-4175

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Insyde BIOS version V190

Description The issue allows local administrators or users to read the BIOS password directly from physical memory because the keyboard buffer is not cleared after reading the BIOS password during system startup.

Recommendations For Insyde BIOS version V190, consider clearing the keyboard buffer manually after entering the BIOS password as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2005-4175

Affected Products

Insyde Bios

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-4175 · Security Note
• http://ivizsecurity.com/preboot-patch.html · Note
• http://securityfocus.com/bid/15751 · Note
• http://ivizsecurity.com/research/preboot/preboot_whitepaper.pdf · Note
• http://securityfocus.com/archive/1/419610/100/0/threaded · Note
• http://kb.cert.org/vuls/id/847537 · Note
• http://pulltheplug.org/users/endrazine/Bios.Information.Leakage.txt · Note