BugTraq
Bios Information Leakage Dec 13 2005 05:25AM
Jonathan Brossard (jbrossar messel emse fr) (1 replies)
Re: Bios Information Leakage Dec 16 2005 09:33AM
Ron van Daal (ronvdaal n1x nl)
On Tue, 13 Dec 2005, Jonathan Brossard wrote:

> The two following techniques were pretty common under MS DOS several years
> ago (see the "Bios Companion" [4] for instance).
> It made use of debug to access physical ports. Under Linux, this
> requires special permissions that are given using ioperm.

> The main idea to reset CMOS is to make the checksum fail.

To make the CMOS checksum fail in the 'good old DOS days' I just typed a
file to CLOCK$ which caused the CMOS to be partly overwritten, disabling
the BIOS password checks.

I agree with you on the fact that plaintext password storage is outdated.

Kind regards,

Ron van Daal
The Netherlands

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus