CVEvulnerability
CVE-2005-4175
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2005-12-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Description
Insyde BIOS V190 does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory.
Affected configurations
• insyde insyde bios v190
References
- http://www.ivizsecurity.com/preboot-patch.html www.ivizsecurity.com
- http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf www.ivizsecurity.com
- http://www.kb.cert.org/vuls/id/847537 Third Party Advisory, US Government Resource
- http://www.pulltheplug.org/users/endrazine/Bios.Information.Leakage.txt www.pulltheplug.org
- http://www.securityfocus.com/archive/1/419610/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/15751 www.securityfocus.com
- http://www.ivizsecurity.com/preboot-patch.html www.ivizsecurity.com
- http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf www.ivizsecurity.com
- http://www.kb.cert.org/vuls/id/847537 Third Party Advisory, US Government Resource
- http://www.pulltheplug.org/users/endrazine/Bios.Information.Leakage.txt www.pulltheplug.org
- http://www.securityfocus.com/archive/1/419610/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/15751 www.securityfocus.com