CVEvulnerability
CVE-2005-4176
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2005-12-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Description
AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory.
References
- http://www.ivizsecurity.com/preboot-patch.html www.ivizsecurity.com
- http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf www.ivizsecurity.com
- http://www.kb.cert.org/vuls/id/847537 Third Party Advisory, US Government Resource
- http://www.pulltheplug.org/users/endrazine/Bios.Information.Leakage.txt www.pulltheplug.org
- http://www.securityfocus.com/archive/1/419610/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/15751 www.securityfocus.com
- http://www.ivizsecurity.com/preboot-patch.html www.ivizsecurity.com
- http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf www.ivizsecurity.com
- http://www.kb.cert.org/vuls/id/847537 Third Party Advisory, US Government Resource
- http://www.pulltheplug.org/users/endrazine/Bios.Information.Leakage.txt www.pulltheplug.org
- http://www.securityfocus.com/archive/1/419610/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/15751 www.securityfocus.com