HP Compaq Notebook PC BIOS Local Unauthorized Access Vulnerability

Bugtraq ID:	28495
Class:	Access Validation Error
CVE:	CVE-2008-0706
Remote:	No
Local:	Yes
Published:	Mar 28 2008 12:00AM
Updated:	Mar 28 2008 05:59PM
Credit:	The vendor reported this issue.
Vulnerable:	HP Compaq PC BIOS 0
Not Vulnerable:	HP Compaq PC BIOS F.31

HP Compaq Notebook PC BIOS Local Unauthorized Access Vulnerability

HP Compaq Notebook PC BIOS is prone to a local unauthorized-access vulnerability.

A local attacker can exploit this issue to gain unauthorized access to the affected computer. Successfully exploiting this issue will completely compromise the affected computer.

HP Compaq Notebook PC BIOS Local Unauthorized Access Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP Compaq Notebook PC BIOS Local Unauthorized Access Vulnerability

Solution:
The vendor has released an update. Please see the references for more information.

HP Compaq Notebook PC BIOS Local Unauthorized Access Vulnerability

References:

• [security bulletin] HPSBGN02319 SSRT080027 rev.1 - HP Compaq Notebook PC BIOS, L ([email protected])
  
• HP Compaq Notebook Homepage (HP)