Intel BIOS System Management Mode Local Privilege Escalation Vulnerability

Bugtraq ID:	38251
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Feb 01 2010 12:00AM
Updated:	Apr 15 2010 01:03AM
Credit:	Intel
Vulnerable:	Sun Ultra 27 Workstation 0 Sun Ultra 24 Workstation 0 Sun Sun Fire X4450 0 Sun Sun Fire X4275 0 Sun Sun Fire X4270 0 Sun Sun Fire X4170 0 Sun Sun Fire X2270 0 Sun Sun Blade X6450 0 Sun Sun Blade X6275 0 Sun Sun Blade X6270 0 Sun Sun Blade X6250 0 Intel DQ57TM 0 Intel DQ45EK 0 Intel DQ45CB 0 Intel DQ43AP 0 Intel DQ35MP 0 Intel DQ35JO 0 Intel DP55WG 0 Intel DP55WB 0 Intel DP55SB 0 Intel DP55KG 0 Intel DH55TC 0 Intel DH55HC 0 Intel DG43GT 0 Intel DG41TY 0 Intel DG41RQ 0 Intel DG41MJ 0 Intel DG41KR 0 Intel DB43LD 0
Not Vulnerable:

Intel BIOS System Management Mode Local Privilege Escalation Vulnerability

Intel BIOS is prone to a local privilege-escalation vulnerability.

An attacker can exploit this issue to modify software that runs in System Management Mode (SMM). Successfully exploiting this issue will allow the attacker to compromise affected computers.

Intel BIOS System Management Mode Local Privilege Escalation Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Intel BIOS System Management Mode Local Privilege Escalation Vulnerability

Solution:
Intel has released fixes. Please see the references for details.

Intel BIOS System Management Mode Local Privilege Escalation Vulnerability

References:

• CVE-2010-0560 Privilege escalation Vulnerability in the BIOS (Sun)
  
• Intel Homepage (Intel)
  
• INTEL-SA-00022 (Intel)