Absolute Software Computrace LoJack for Laptops Security Bypass Vulnerability
BID:35889
Info
Absolute Software Computrace LoJack for Laptops Security Bypass Vulnerability
| Bugtraq ID: | 35889 |
| Class: | Unknown |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 30 2009 12:00AM |
| Updated: | Jul 31 2009 09:54PM |
| Credit: | Alfredo Ortega and Anibal Sacco from Core Security Technologies |
| Vulnerable: |
Absolute Software Computrace LoJack for Laptops 0 |
| Not Vulnerable: | |
Discussion
Absolute Software Computrace LoJack for Laptops Security Bypass Vulnerability
Absolute Software Computrace LoJack for Laptops is prone to a security-bypass vulnerability.
Successfully exploiting this issue will allow attackers to control the application's communication to a central authority. Since this issue resides in an affected laptop's BIOS, it is persistent and virtually undetectable. Successful exploits will result in the complete compromise of affected laptops.
Currently very few technical details are available. We will update this BID as more information emerges.
Computrace LoJack for Laptops ships on many laptop models, including HP, Dell, Lenovo, Toshiba, Gateway, Asus, and Panasonic.
Absolute Software Computrace LoJack for Laptops is prone to a security-bypass vulnerability.
Successfully exploiting this issue will allow attackers to control the application's communication to a central authority. Since this issue resides in an affected laptop's BIOS, it is persistent and virtually undetectable. Successful exploits will result in the complete compromise of affected laptops.
Currently very few technical details are available. We will update this BID as more information emerges.
Computrace LoJack for Laptops ships on many laptop models, including HP, Dell, Lenovo, Toshiba, Gateway, Asus, and Panasonic.
Exploit / POC
Absolute Software Computrace LoJack for Laptops Security Bypass Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Absolute Software Computrace LoJack for Laptops Security Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Absolute Software Computrace LoJack for Laptops Security Bypass Vulnerability
References:
References:
- Researchers find insecure BIOS 'rootkit' pre-loaded in laptops (Ryan Naraine)
- Vendor Homepage (Absolute Software)