LILO gfxboot Plaintext Password Display Vulnerability
BID:10866
Info
LILO gfxboot Plaintext Password Display Vulnerability
| Bugtraq ID: | 10866 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 04 2004 12:00AM |
| Updated: | Aug 04 2004 12:00AM |
| Credit: | The individual responsible for the discovery of this issue is currently unknown; this issue was disclosed in the referenced vendor advisory. |
| Vulnerable: |
S.u.S.E. Linux Personal 9.1 |
| Not Vulnerable: | |
Discussion
LILO gfxboot Plaintext Password Display Vulnerability
Reportedly gfxboot is affected by a plain text password display vulnerability. This issue is due to a design error that fails to protect user passwords.
The problem reportedly results in the plain text lilo boot password to be displayed when typing.
An attacker might leverage this issue to read the plain text lilo boot password.
Reportedly gfxboot is affected by a plain text password display vulnerability. This issue is due to a design error that fails to protect user passwords.
The problem reportedly results in the plain text lilo boot password to be displayed when typing.
An attacker might leverage this issue to read the plain text lilo boot password.
Exploit / POC
LILO gfxboot Plaintext Password Display Vulnerability
No exploit is required to leverage this issue.
No exploit is required to leverage this issue.
Solution / Fix
LILO gfxboot Plaintext Password Display Vulnerability
Solution:
SuSE has released an updated package dealing with this issue.
S.u.S.E. Linux Personal 9.1
Solution:
SuSE has released an updated package dealing with this issue.
S.u.S.E. Linux Personal 9.1
-
SuSE gfxboot.rpm
http://mirror.mcs.anl.gov/suse-people/snwint/9.1/gfxboot/gfxboot.rpm
References
LILO gfxboot Plaintext Password Display Vulnerability
References:
References: