CVE-2005-4176

Description

AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory.

References

http://www.securityfocus.com/bid/15751

http://www.securityfocus.com/archive/1/419610/100/0/threaded

http://www.pulltheplug.org/users/endrazine/Bios.Information.Leakage.txt

http://www.kb.cert.org/vuls/id/847537

http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf

http://www.ivizsecurity.com/preboot-patch.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS