• info
• discussion
• exploit
• solution
• references

GNU GRUB Local Authentication Bypass Vulnerability

Solution:
Updates are available. Please see the references for details.


GNU GRUB 1.97

• GNU grub-1.97.1.tar.gz
  ftp://alpha.gnu.org/gnu/grub/grub-1.97.1.tar.gz

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu grub-common_1.97~beta4-1ubuntu4.1_lpia.deb
  http://ports.ubuntu.com/pool/main/g/grub2/grub-common_1.97~beta4-1ubun tu4.1_lpia.deb


• Ubuntu grub-efi-ia32_1.97~beta4-1ubuntu4.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/g/grub2/grub-efi-ia32_1.97~beta4 -1ubuntu4.1_lpia.deb


• Ubuntu grub-efi_1.97~beta4-1ubuntu4.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/g/grub2/grub-efi_1.97~beta4-1ubu ntu4.1_lpia.deb


• Ubuntu grub-emu_1.97~beta4-1ubuntu4.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/g/grub2/grub-emu_1.97~beta4-1ubu ntu4.1_lpia.deb


• Ubuntu grub-firmware-qemu_1.97~beta4-1ubuntu4.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/g/grub2/grub-firmware-qemu_1.97~ beta4-1ubuntu4.1_lpia.deb


• Ubuntu grub-ieee1275_1.97~beta4-1ubuntu4.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/g/grub2/grub-ieee1275_1.97~beta4 -1ubuntu4.1_lpia.deb


• Ubuntu grub-linuxbios_1.97~beta4-1ubuntu4.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/g/grub2/grub-linuxbios_1.97~beta 4-1ubuntu4.1_lpia.deb


• Ubuntu grub-pc_1.97~beta4-1ubuntu4.1_lpia.deb
  http://ports.ubuntu.com/pool/main/g/grub2/grub-pc_1.97~beta4-1ubuntu4. 1_lpia.deb


• Ubuntu grub-rescue-pc_1.97~beta4-1ubuntu4.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/g/grub2/grub-rescue-pc_1.97~beta 4-1ubuntu4.1_lpia.deb


• Ubuntu grub2_1.97~beta4-1ubuntu4.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/g/grub2/grub2_1.97~beta4-1ubuntu 4.1_lpia.deb

Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu grub-common_1.97~beta4-1ubuntu4.1_sparc.deb
  http://ports.ubuntu.com/pool/main/g/grub2/grub-common_1.97~beta4-1ubun tu4.1_sparc.deb


• Ubuntu grub-emu_1.97~beta4-1ubuntu4.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/g/grub2/grub-emu_1.97~beta4-1ubu ntu4.1_sparc.deb


• Ubuntu grub-ieee1275_1.97~beta4-1ubuntu4.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/g/grub2/grub-ieee1275_1.97~beta4 -1ubuntu4.1_sparc.deb


• Ubuntu grub2_1.97~beta4-1ubuntu4.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/g/grub2/grub2_1.97~beta4-1ubuntu 4.1_sparc.deb

Ubuntu Ubuntu Linux 9.10 i386

• Ubuntu grub-common_1.97~beta4-1ubuntu4.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/grub2/grub-common_1.97~b eta4-1ubuntu4.1_i386.deb


• Ubuntu grub-coreboot_1.97~beta4-1ubuntu4.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/grub2/grub-coreboot_ 1.97~beta4-1ubuntu4.1_i386.deb


• Ubuntu grub-efi-amd64_1.97~beta4-1ubuntu4.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/grub2/grub-efi-amd64 _1.97~beta4-1ubuntu4.1_i386.deb


• Ubuntu grub-efi-ia32_1.97~beta4-1ubuntu4.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/grub2/grub-efi-ia32_ 1.97~beta4-1ubuntu4.1_i386.deb


• Ubuntu grub-efi_1.97~beta4-1ubuntu4.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/grub2/grub-efi_1.97~ beta4-1ubuntu4.1_i386.deb


• Ubuntu grub-emu_1.97~beta4-1ubuntu4.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/grub2/grub-emu_1.97~ beta4-1ubuntu4.1_i386.deb


• Ubuntu grub-firmware-qemu_1.97~beta4-1ubuntu4.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/grub2/grub-firmware- qemu_1.97~beta4-1ubuntu4.1_i386.deb


• Ubuntu grub-ieee1275_1.97~beta4-1ubuntu4.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/grub2/grub-ieee1275_ 1.97~beta4-1ubuntu4.1_i386.deb


• Ubuntu grub-linuxbios_1.97~beta4-1ubuntu4.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/grub2/grub-linuxbios _1.97~beta4-1ubuntu4.1_i386.deb


• Ubuntu grub-pc_1.97~beta4-1ubuntu4.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/grub2/grub-pc_1.97~beta4 -1ubuntu4.1_i386.deb


• Ubuntu grub-rescue-pc_1.97~beta4-1ubuntu4.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/grub2/grub-rescue-pc _1.97~beta4-1ubuntu4.1_i386.deb


• Ubuntu grub2_1.97~beta4-1ubuntu4.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/grub2/grub2_1.97~bet a4-1ubuntu4.1_i386.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu grub-common_1.97~beta4-1ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/grub2/grub-common_1.97~b eta4-1ubuntu4.1_amd64.deb


• Ubuntu grub-coreboot_1.97~beta4-1ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/grub2/grub-coreboot_ 1.97~beta4-1ubuntu4.1_amd64.deb


• Ubuntu grub-efi-amd64_1.97~beta4-1ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/grub2/grub-efi-amd64 _1.97~beta4-1ubuntu4.1_amd64.deb


• Ubuntu grub-efi-ia32_1.97~beta4-1ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/grub2/grub-efi-ia32_ 1.97~beta4-1ubuntu4.1_amd64.deb


• Ubuntu grub-efi_1.97~beta4-1ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/grub2/grub-efi_1.97~ beta4-1ubuntu4.1_amd64.deb


• Ubuntu grub-emu_1.97~beta4-1ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/grub2/grub-emu_1.97~ beta4-1ubuntu4.1_amd64.deb


• Ubuntu grub-firmware-qemu_1.97~beta4-1ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/grub2/grub-firmware- qemu_1.97~beta4-1ubuntu4.1_amd64.deb


• Ubuntu grub-ieee1275_1.97~beta4-1ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/grub2/grub-ieee1275_ 1.97~beta4-1ubuntu4.1_amd64.deb


• Ubuntu grub-linuxbios_1.97~beta4-1ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/grub2/grub-linuxbios _1.97~beta4-1ubuntu4.1_amd64.deb


• Ubuntu grub-pc_1.97~beta4-1ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/grub2/grub-pc_1.97~beta4 -1ubuntu4.1_amd64.deb


• Ubuntu grub-rescue-pc_1.97~beta4-1ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/grub2/grub-rescue-pc _1.97~beta4-1ubuntu4.1_amd64.deb


• Ubuntu grub2_1.97~beta4-1ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/grub2/grub2_1.97~bet a4-1ubuntu4.1_amd64.deb