Multiple Vendor BIOS Keyboard Buffer Password Persistence Weakness

Threat level definition

Multiple Vendor BIOS Keyboard Buffer Password Persistence Weakness

References:

McAfee Endpoint Encryption (formerly SafeBoot Encryption) (McAfee)
BIOS Information Leakage (Endrazine)
Bypassing pre-boot authenti ation passwords by instrumenting the BIOS keyboard b (iViZ Techno Solutions Pvt)
IBM Lenovo BIOS Plain Text Password Disclosure (iViZ Techno Solutions Pvt)
INTEL-SA-00016 - Intel Keyboard Buffer Information Disclosure Vulnerability (Intel)
Microsoft Bitlocker Plain Text Password Disclosure (iViZ Techno Solutions Pvt)
Security Advisory: DiskCryptor Security Model bypass exploiting wrong BIOS API u (iViZ Techno Solutions Pvt)
Security Advisory: DriveCrypt Security Model bypass exploiting wrong BIOS API us (iViZ Techno Solutions Pvt)
Security Advisory: Grub Legacy Security Model bypass exploiting wrong BIOS API u (iViZ Techno Solutions Pvt)
Security Advisory: Hewlett-Packard BIOS Plain Text Password Disclosure (iViZ Techno Solutions Pvt)
Security Advisory: Intel BIOS Plain Text Password Disclosure (iViZ Techno Solutions Pvt)
Security Advisory: LILO Security Model bypass exploiting wrong BIOS API usage (iViZ Techno Solutions Pvt)
Security Advisory: McAfee SafeBoot Device Encryption v4, Build 4750 and below (iViZ Techno Solutions Pvt)
Security Advisory: TrueCrypt Security Model bypass exploiting wrong BIOS API usa (iViZ Techno Solutions Pvt)

Privacy Statement
Copyright 2009, SecurityFocus