CVE-2005-4175

Insyde BIOS V190 does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2005-12-11

Last modified

2024-08-07

Affected products

• Insyde Bios (Insyde)

References

• http://www.ivizsecurity.com/preboot-patch.html
• http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf
• http://www.kb.cert.org/vuls/id/847537
• http://www.pulltheplug.org/users/endrazine/Bios.Information.Leakage.txt
• http://www.securityfocus.com/archive/1/419610/100/0/threaded
• http://www.securityfocus.com/bid/15751