Dell Latitude C800 Bios Suspended Session Bypassing Vulnerability

Bugtraq ID:	3180
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Aug 14 2001 12:00AM
Updated:	Aug 14 2001 12:00AM
Credit:	This vulnerability was announced to Bugtraq by Bernhard Rosenkraenzer <[email protected]> on August 14, 2001.
Vulnerable:	Dell Latitude C800 A13 Dell Latitude C800 A12 Dell Latitude C800 A11 Dell Latitude C800 A10 Dell Latitude C800 A09
Not Vulnerable:

Dell Latitude C800 Bios Suspended Session Bypassing Vulnerability

Latitude is one of the makes of laptops available from Dell.

A problem in Dell Latitude BIOS makes it possible for users to gain access to sensitive information. A user with physical access to the laptop may boot the target system with a suspended session via another medium, such as floppy or cdrom. The user may then extract the contents of the suspend partition, which could lead to password retrieval, or access to other sensitive information.

Dell Latitude C800 Bios Suspended Session Bypassing Vulnerability

No exploit is required for this vulnerability.

Dell Latitude C800 Bios Suspended Session Bypassing Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Dell Latitude C800 Bios Suspended Session Bypassing Vulnerability

References: