Software suspend 2 2-2.2.1, when used with the Linux kernel 2.6.16, stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2022-10-03T16:13:42
Updated: 2022-10-03T16:13:42
Reserved: 2022-10-03T00:00:00
Link: CVE-2008-3901
JSON object: View
NVD Information
Status : Analyzed
Published: 2008-09-03T14:12:00.000
Modified: 2008-09-05T21:44:09.247
Link: CVE-2008-3901
JSON object: View
Redhat Information
No data.
CWE