[bug #46699] GRUB password login vulnerability

[Chris DeAngelis]

URL:
  <http://savannah.gnu.org/bugs/?46699>

                 Summary: GRUB password login vulnerability
                 Project: GNU GRUB
            Submitted by: fractal618
            Submitted on: Wed 16 Dec 2015 06:36:49 PM GMT
                Category: Security
                Severity: Major
                Priority: 5 - Normal
              Item Group: Action Request
                  Status: None
                 Privacy: Public
             Assigned to: None
         Originator Name: Chris
        Originator Email: address@hidden
             Open/Closed: Open
         Discussion Lock: Any
                 Release: 
                 Release: 2.00
         Reproducibility: None
         Planned Release: None

    _______________________________________________________

Details:

Pressing the backspace key 28 times can bypass the Grub2 bootloader's password
protection and allow a hacker to install malware on a locked-down Linux
system.

http://www.pcworld.com/article/3016097/vulnerability-in-popular-bootloader-puts-locked-down-linux-computers-at-risk.html




    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?46699>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/