NVD

Id
3759  
Name
CVE-2008-3897  
Description
DiskCryptor 0.2.6 on Windows stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-09-03  
Modified Date
2009-01-29  
Seq
2008-3897  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
23785 3759 CVE-2008-3897 4212  View
23786 3759 CVE-2008-3897 http://www.ivizsecurity.com/preboot-patch.html  View
23787 3759 CVE-2008-3897 http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf  View
23788 3759 CVE-2008-3897 20080825 [IVIZ-08-006] DiskCryptor Security Model bypass exploiting wrong BIOS API usage  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48091 JVNDB-2008-003401 DiskCryptor における重要な情報を取得される脆弱性 DiskCryptor は、BIOS Keyboard バッファ内にブート前の認証パスワードを格納し、バッファを使用前後にクリアしないため、重要な情報を取得される脆弱性が存在します。 CVE-2008-3897 34010 CVE-2008-3897 3759 2.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003401.html 2008-09-03 2012-06-26 View