PT-2009-2769 · Intel · Intel Txt

Joanna Rutkowska · Published 2009-01-07 · Updated 2009-01-08 · CVE-2009-0066

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intel system software for Trusted Execution Technology (TXT) (affected versions not specified)

Description The issue allows attackers to bypass intended loader integrity protections. This is demonstrated by exploitation of tboot. As of the given date, the only disclosure is a vague pre-advisory with no actionable information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2009-0066

Affected Products

Intel Txt

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2009-0066 · Security Note
• http://theinvisiblethings.blogspot.com/2009/01/attacking-intel-trusted-execution.html · Note
• http://securityfocus.com/bid/33119 · Note
• http://invisiblethingslab.com/press/itl-press-2009-01.pdf · Note
• http://blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Wojtczuk · Note