CVE-2008-3898 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-3898
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-3898

Description: Secu Star DriveCrypt Plus Pack 3.9 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.

CVE Status: Candidate

References: SREASON http://securityreason.com/securityalert/4213 SAID Secunia Advisory: SA31605 MISC http://www.ivizsecurity.com/security-advisory-iviz-sr-0807.html http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf http://www.ivizsecurity.com/preboot-patch.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/495803/100/0/threaded BID 30818

Return to the previous page.