Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
780 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-240706-1 - http://www.securityfocus.com/bid/30880 - http://www.vupen.com/english/advisories/2008/2460 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5453 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44753
CVE ID: CVE-2008-3876 State: PUBLISHED Published: 2008-09-02T14:00:00 Last Updated: 2024-08-07T09:53:00.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple iPhone 2.0.2, in some configurations, allows physically proximate attackers to bypass intended access restrictions, and obtain sensitive information or make arbitrary use of the device, via an Emergency Call tap and a Home double-tap, followed by a tap of any contact's blue arrow. Additional Analyst Notes: - CVE Program Container: References: - http://forums.macrumors.com/showpost.php?p=6121914&postcount=118 - http://forums.macrumors.com/showthread.php?t=551617 - http://securitytracker.com/id?1020763
CVE ID: CVE-2008-3877 State: PUBLISHED Published: 2008-09-02T15:00:00 Last Updated: 2024-08-07T09:53:00.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Acoustica Mixcraft 4.1 Build 96 and 4.2 Build 98 allows user-assisted attackers to execute arbitrary code via a crafted .mx4 file. NOTE: it was later reported that version 3 is also affected. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44751 - http://securityreason.com/securityalert/4199 - https://www.exploit-db.com/exploits/6322 - http://www.securityfocus.com/bid/33012 - http://secunia.com/advisories/31595 - http://www.sec
oit-db.com/exploits/6322 - http://www.securityfocus.com/bid/33012 - http://secunia.com/advisories/31595 - http://www.securityfocus.com/bid/30879 - https://www.exploit-db.com/exploits/7577
CVE ID: CVE-2008-3878 State: PUBLISHED Published: 2008-09-02T15:00:00 Last Updated: 2024-08-07T09:53:00.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method. Additional Analyst Notes: - CVE Program Container: References: - http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.html - https://www.exploit-db.com/exploits/6318 - http://secunia.com/advisories/31632 - http://securityreason.com/securityalert/4200 - https:
ploit-db.com/exploits/6318 - http://secunia.com/advisories/31632 - http://securityreason.com/securityalert/4200 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44749 - http://www.securityfocus.com/bid/30861 - http://www.shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219826651.ff.php
CVE ID: CVE-2008-3879 State: PUBLISHED Published: 2008-09-02T15:00:00 Last Updated: 2024-08-07T09:53:00.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 and earlier in Ultra Shareware Ultra Office Control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument (SaveAsDocument argument) to the Save method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6319 - http://securityreason.com/securityalert/4201 -
gram Container: References: - https://www.exploit-db.com/exploits/6319 - http://securityreason.com/securityalert/4201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44750 - http://secunia.com/advisories/31632 - http://www.shinnai.net/xplits/TXT_NPku7jFjRufaz85U6Lxn.html - http://www.shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219827906.ff.php - http://www.securityfocus.com/bid/30863
CVE ID: CVE-2008-3880 State: PUBLISHED Published: 2008-09-02T15:00:00 Last Updated: 2024-08-07T09:53:00.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in zm_html_view_event.php in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary SQL commands via the filter array parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30843 - http://secunia.com/advisories/31636 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44726 - http://www.securityfocus.com/archive/1/495745/100/0/threaded
CVE ID: CVE-2008-3881 State: PUBLISHED Published: 2008-09-02T15:00:00 Last Updated: 2024-08-07T09:53:00.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified "zm_html_view_*.php" files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30843 - http://secunia.com/advisories/31636 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44725 - http://www.securityfocus.com/archive/1/495745/100/0/threaded
CVE ID: CVE-2008-3882 State: PUBLISHED Published: 2008-09-02T15:00:00 Last Updated: 2024-08-07T09:53:00.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified "Command Injection" vulnerability in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbitrary commands via (1) the executeFilter function in zm_html_view_events.php and (2) the run_state parameter to zm_html_view_state.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30843 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44728 - http://secunia.com/advisories/31636 - http://www.securityfocus.com/archive/1/495745/100/0/threaded
CVE ID: CVE-2008-3883 State: PUBLISHED Published: 2008-09-02T15:00:00 Last Updated: 2024-08-07T09:53:00.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: configvar in Caudium 1.4.12 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/roken#####.pike temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44768 - http://www.securityfocus.com/bid/30897 - http://uvw.ru/report.lenny.txt - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496404 - http://dev.gentoo.org/~rbu/s
http://uvw.ru/report.lenny.txt - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496404 - http://dev.gentoo.org/~rbu/security/debiantemp/caudium - http://secunia.com/advisories/31656
CVE ID: CVE-2008-3884 State: PUBLISHED Published: 2008-09-02T15:00:00 Last Updated: 2024-08-07T09:53:00.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Blogn (BURO GUN) 1.9.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2006-6176. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31662 - http://www.securityfocus.com/bid/30920 - http://www.blogn.org/index.php?e=172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44767 - http://jvn.jp/en/jp/JVN03859837/index.html
CVE ID: CVE-2008-3885 State: PUBLISHED Published: 2008-09-02T15:00:00 Last Updated: 2024-08-07T09:53:00.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Blogn (BURO GUN) 1.9.7 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make content modifications. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31662 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44769 - http://www.blogn.org/index.php?e=172 - http://jvn.jp/en/jp/JVN84125369/index.html
CVE ID: CVE-2008-3886 State: PUBLISHED Published: 2008-09-02T15:00:00 Last Updated: 2024-08-07T09:53:00.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in dotProject 2.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) the inactive parameter in a tasks action, (2) the date parameter in a calendar day_view action, (3) the callback parameter in a public calendar action, or (4) the type parameter in a ticketsmith action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstorm.linuxsecurity.com/0808-exploits/dotproject-sqlxss.txt - https://exchange.xforce.ibmcloud.c
erences: - http://packetstorm.linuxsecurity.com/0808-exploits/dotproject-sqlxss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/44770 - http://secunia.com/advisories/31681 - http://www.securityfocus.com/bid/30924
CVE ID: CVE-2008-3887 State: PUBLISHED Published: 2008-09-02T15:00:00 Last Updated: 2024-08-07T09:53:00.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in dotProject 2.1.2 allow (1) remote authenticated users to execute arbitrary SQL commands via the tab parameter in a projects action, and (2) remote authenticated administrators to execute arbitrary SQL commands via the user_id parameter in a viewuser action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44771 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44772 - http://packetstorm.linuxsecurity
om/vulnerabilities/44771 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44772 - http://packetstorm.linuxsecurity.com/0808-exploits/dotproject-sqlxss.txt - http://secunia.com/advisories/31681 - http://www.securityfocus.com/bid/30924
CVE ID: CVE-2008-3888 State: PUBLISHED Published: 2008-09-02T15:00:00 Last Updated: 2024-08-07T09:53:00.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in members.asp in Mini-NUKE Freehost 2.3 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a member_details action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/495743/100/0/threaded
CVE ID: CVE-2008-3889 State: PUBLISHED Published: 2008-09-12T16:00:00 Last Updated: 2024-08-07T09:53:00.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used with the Linux 2.6 kernel, leaks epoll file descriptors during execution of "non-Postfix" commands, which allows local users to cause a denial of service (application slowdown or exit) via a crafted command, as demonstrated by a command in a .forward file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31986 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00271.html - http
secunia.com/advisories/31986 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00271.html - http://secunia.com/advisories/32231 - http://www.securityfocus.com/archive/1/496420/100/0/threaded - http://secunia.com/advisories/31982 - http://www.ubuntu.com/usn/usn-642-1 - http://www.securityfocus.com/bid/30977 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00287.html - http://secunia.com/advisories/31800 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44865 - http://securityreason.com/securityalert/4239 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html - http://security.gentoo.org/glsa/glsa-200809-09.xml - http:
ensuse.org/opensuse-security-announce/2008-09/msg00004.html - http://security.gentoo.org/glsa/glsa-200809-09.xml - http://www.wekk.net/research/CVE-2008-3889/ - http://secunia.com/advisories/31716 - https://www.exploit-db.com/exploits/6472 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:190 - http://securitytracker.com/id?1020800 - http://www.postfix.org/announcements/20080902.html - http://www.securityfocus.com/archive/1/498037/100/0/threaded - http://www.securityfocus.com/archive/1/495894/100/0/threaded - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0311
CVE ID: CVE-2008-3890 State: PUBLISHED Published: 2008-09-05T16:00:00 Last Updated: 2024-08-07T09:53:00.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in FreeBSD 6.3 through 7.0 on amd64 platforms can make an extra swapgs call after a General Protection Fault (GPF), which allows local users to gain privileges by triggering a GPF during the kernel's return from (1) an interrupt, (2) a trap, or (3) a system call. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31743 - http://security.freebsd.org/advisories/FreeBSD-SA-08:07.amd64.asc - http://www.securitytracker.com/id?1020815 - https://exchange.xforce.ibmcloud.com/vulne
ries/FreeBSD-SA-08:07.amd64.asc - http://www.securitytracker.com/id?1020815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44905 - http://www.securityfocus.com/bid/31003
CVE ID: CVE-2008-3891 State: PUBLISHED Published: 2008-09-03T14:00:00Z Last Updated: 2024-09-16T16:58:07.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SAML Single Sign-On (SSO) Service for Google Apps allows remote service providers to impersonate users at arbitrary service providers via vectors related to authentication responses that lack a request identifier and recipient field. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/MIMG-7FQGWU - http://www.kb.cert.org/vuls/id/612636
CVE ID: CVE-2008-3892 State: PUBLISHED Published: 2008-09-03T14:00:00 Last Updated: 2024-08-07T09:53:00.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a call to the GuestInfo method in which
cause a denial of service (browser crash) or possibly execute arbitrary code via a call to the GuestInfo method in which there is a long string argument, and an assignment of a long string value to the result of this call. NOTE: this may overlap CVE-2008-3691, CVE-2008-3692, CVE-2008-3693, CVE-2008-3694, CVE-2008-3695, or CVE-2008-3696. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/support/server/doc/releasenotes_server.html - https://www.exploit-db.com/exploits/6345 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43062 - http://secunia.com/advisories/31709 - http://www.vmware.com/su
ps://exchange.xforce.ibmcloud.com/vulnerabilities/43062 - http://secunia.com/advisories/31709 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html - http://secunia.com/advisories/31710 - http://www.securityfocus.com/bid/30934 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://www.securityfocus.com/archive/1/495869/100/0/threaded - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html - http://secunia.com/advisories/31707 - http://secunia.com/advisories/31708 - http://www.securityfocus.com/bid/29503 - http://w
//secunia.com/advisories/31707 - http://secunia.com/advisories/31708 - http://www.securityfocus.com/bid/29503 - http://www.vmware.com/support/player/doc/releasenotes_player.html - http://securityreason.com/securityalert/4202 - http://www.vupen.com/english/advisories/2008/2466
CVE ID: CVE-2008-3893 State: PUBLISHED Published: 2008-09-03T14:00:00.000Z Last Updated: 2025-04-03T13:36:25.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Bitlocker in Windows Vista before SP1 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer during boot, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/31619 - http://www.ivizsecurity.com/security-advisory-iviz-sr-0801.html
CVE ID: CVE-2008-3894 State: PUBLISHED Published: 2008-09-03T14:00:00 Last Updated: 2024-08-07T09:53:00.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lenovo firmware 7CETB5WW 2.05 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4207 - http://www.ivizsecurity.com/preboot-patch.html - http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf - http://www.securityfocus.com/
preboot-patch.html - http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf - http://www.securityfocus.com/archive/1/495808/100/0/threaded
CVE ID: CVE-2008-3895 State: PUBLISHED Published: 2008-09-03T14:00:00 Last Updated: 2024-08-07T09:53:00.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: LILO 22.6.1 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer. Additional Analyst Notes: - CVE Program Container: References: - http://www.ivizsecurity.com/preboot-patch.html - http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf - http://www.securityfocus.com/archive/1/495801/100/0/threaded - http://secur
om/research/preboot/preboot_whitepaper.pdf - http://www.securityfocus.com/archive/1/495801/100/0/threaded - http://securityreason.com/securityalert/4211
CVE ID: CVE-2008-3896 State: PUBLISHED Published: 2008-09-03T14:00:00 Last Updated: 2024-08-07T09:53:00.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/495726/100/0/threaded - http://securityreason.com/securityalert/4206 - http://www.ivizsecurity.com/preboot-patch.html - http://www.ivizsecurity.com/re
/securityreason.com/securityalert/4206 - http://www.ivizsecurity.com/preboot-patch.html - http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf - http://securityreason.com/securityalert/4204
CVE ID: CVE-2008-3897 State: PUBLISHED Published: 2008-09-03T14:00:00 Last Updated: 2024-08-07T09:53:00.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: DiskCryptor 0.2.6 on Windows stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer. Additional Analyst Notes: - CVE Program Container: References: - http://www.ivizsecurity.com/preboot-patch.html - http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf - http://www.securityfocus.com/archive/1/495725/100/0/threaded - http://
ity.com/research/preboot/preboot_whitepaper.pdf - http://www.securityfocus.com/archive/1/495725/100/0/threaded - http://securityreason.com/securityalert/4212
CVE ID: CVE-2008-3898 State: PUBLISHED Published: 2008-09-03T14:00:00 Last Updated: 2024-08-07T09:53:00.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secu Star DriveCrypt Plus Pack 3.9 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31605 - http://www.ivizsecurity.com/security-advisory-iviz-sr-0807.html - http://www.securityfocus.com/bid/30818 - http://www.ivizsecurity.com/preboot-pa
om/security-advisory-iviz-sr-0807.html - http://www.securityfocus.com/bid/30818 - http://www.ivizsecurity.com/preboot-patch.html - http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf - http://www.securityfocus.com/archive/1/495803/100/0/threaded - http://securityreason.com/securityalert/4213
CVE ID: CVE-2008-3899 State: PUBLISHED Published: 2008-09-03T14:00:00 Last Updated: 2024-08-07T09:53:00.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: TrueCrypt 5.0 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer. NOTE: the researcher mentions a response from the vendor denying the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4203 - http://www.ivizsecurity.com/preboot-patch.html - http://www.ivizsecurity.
http://securityreason.com/securityalert/4203 - http://www.ivizsecurity.com/preboot-patch.html - http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf - http://www.securityfocus.com/archive/1/495805/100/0/threaded
CVE ID: CVE-2008-3900 State: PUBLISHED Published: 2008-09-03T14:00:00 Last Updated: 2024-08-07T09:53:00.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intel firmware PE94510M.86A.0050.2007.0710.1559 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/495804/100/0/threaded - http://www.kb.cert.org/vuls/id/604539 - http://securitytracker.com/id?1020738 - http://www.ivizsecurity.com/preboot-pa
- http://www.kb.cert.org/vuls/id/604539 - http://securitytracker.com/id?1020738 - http://www.ivizsecurity.com/preboot-patch.html - http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf - http://securityreason.com/securityalert/4205
CVE ID: CVE-2008-3901 State: PUBLISHED Published: 2008-09-03T14:00:00Z Last Updated: 2024-09-16T21:58:03.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Software suspend 2 2-2.2.1, when used with the Linux kernel 2.6.16, stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer. Additional Analyst Notes: - CVE Program Container: References: - http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf