PT-2005-4875 · Award · Award Bios Modular

Published 2005-12-11 · Updated 2018-10-19 · CVE-2005-4176

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions AWARD Bios Modular version 4.50pg

Description The issue concerns the failure to clear the keyboard buffer after reading the BIOS password during system startup. This allows local administrators or users to read the password directly from physical memory.

Recommendations For AWARD Bios Modular version 4.50pg, consider changing the BIOS password to a new, complex password and ensuring physical security of the system to minimize the risk of exploitation. Additionally, restrict access to the system's physical memory to prevent unauthorized password reading.

Exploit

Fix

Related Identifiers

CVE-2005-4176

Affected Products

Award Bios Modular

References · 9

• 🔥 https://exploit-db.com/exploits/26752 · Exploit
• 🔥 https://exploit-db.com/exploits/26753 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4176 · Security Note
• http://securityfocus.com/archive/1/419610/100/0/threaded · Note
• http://pulltheplug.org/users/endrazine/Bios.Information.Leakage.txt · Note
• http://ivizsecurity.com/preboot-patch.html · Note
• http://securityfocus.com/bid/15751 · Note
• http://ivizsecurity.com/research/preboot/preboot_whitepaper.pdf · Note
• http://kb.cert.org/vuls/id/847537 · Note