ID CVE-2008-7020
Summary McAfee SafeBoot Device Encryption 4 build 4750 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.
References
Vulnerable Configurations
  • cpe:2.3:a:mcafee:safeboot_device_encryption:4:*:*:*:*:*:*:*
    cpe:2.3:a:mcafee:safeboot_device_encryption:4:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 17-08-2017 - 01:29)
Impact:
Exploitability:
CWE CWE-310
CAPEC
  • Signature Spoofing by Key Recreation
    An attacker obtains an authoritative or reputable signer's private signature key by exploiting a cryptographic weakness in the signature algorithm or pseudorandom number generation and then uses this key to forge signatures from the original signer to mislead a victim into performing actions that benefit the attacker.
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:N/A:N
refmap via4
fulldisc 20080918 [IVIZ-08-010] McAfee SafeBoot Device Encryption Plain Text Password Disclosure (v4, Build 4750 and below)
misc
secunia 31903
xf safeboot-bioskeyboard-info-disclosure(45275)
Last major update 17-08-2017 - 01:29
Published 21-08-2009 - 14:30
Last modified 17-08-2017 - 01:29
Back to Top