exploits , vulnerabilities , articles , Intel BIOS Version Reversion Local Privilege Escalation Vulnerability

Title	Intel BIOS Version Reversion Local Privilege Escalation Vulnerability
Published	2009-10-16-12:00AM
Updated	2009-10-17-12:18AM
Class	Design Error
CVE
Remote	No
Local	Yes
Credit	Alexander Tereshkin, Rafal Wojtczuk, and Joanna Rutkowska from Invisible Things Lab
Vulnerable	Intel DX58SO 0 Intel DX48BT2 0 Intel DX38BT 0 Intel DQ45EK 0 Intel DQ45CB 0 Intel DQ43AP 0 Intel DQ35MP 0 Intel DQ35JO 0 Intel DQ35EC 0 Intel DP45SG 0 Intel DP43TF 0 Intel DP35DP 0 Intel DG45ID 0 Intel DG45FC 0 Intel DG43NB 0 Intel DG41TY 0 Intel DG41RQ 0 Intel DG41MJ 0 Intel DG33TL 0 Intel DG33FB 0 Intel DG33BU 0 Intel DB43LD 0 Intel D945GSEJT 0 Intel D945GCLF2 0 Intel D945GCLF 0 Intel D5400XS 0
Not Vulnerable	Intel DX58SO SOX5810J.86A.4196 Intel DX48BT2 BTX3810J.86A.2000 Intel DX38BT BTX3810J.86A.2000 Intel DQ45EK CBQ4510H.86A.0087 Intel DQ45CB CBQ4510H.86A.0087 Intel DQ43AP APQ4310H.86A.0025 Intel DQ35MP JOQ3510J.86A.1108 Intel DQ35JO JOQ3510J.86A.1108 Intel DQ35EC ECG3510M.86A.0117.20 Intel DP45SG SGP4510H.86A.0118 Intel DP43TF NBG4310H.86A.0087 Intel DP35DP DPP3510J.86A.0572 Intel DG45ID IDG4510H.86A.0105 Intel DG45FC IDG4510H.86A.0105 Intel DG43NB NBG4310H.86A.0087 Intel DG41TY TYG4110H.86A.0030 Intel DG41RQ RQG4110H.86A.0011 Intel DG41MJ MJG4110H.86A.0004 Intel DG33TL DPP3510J.86A.0572 Intel DG33FB DPP3510J.86A.0572 Intel DG33BU DPP3510J.86A.0572 Intel DB43LD LDB4310H.86A.0031 Intel D945GSEJT JT94510H.86A.0032 Intel D945GCLF2 LF94510J.86A.0183 Intel D945GCLF LF94510J.86A.0183 Intel D5400XS XS54010J.86A.1338
Code	Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: content@securitydot.net.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-14 Microsoft Protected Extensible Authentication Protocol Authentication Bypass Vulnerability
2009-12-14 Google Chrome DNS Pre-Fetching Proxy Cache Information Disclosure Vulnerability
2009-12-14 Oracle E-Business Suite Multiple Remote Vulnerabilities
2009-12-14 MySQL Multiple Remote Denial Of Service Vulnerabilities
2009-12-14 Digital Scribe Multiple SQL Injection Vulnerabilities
2009-12-14 Microsoft WordPad and Office Text Converters Word 97 File Parsing Memory Corruption Vulnerability
2009-12-14 Microsoft Protected Extensible Authentication Protocol Memory Corruption Vulnerability
2009-12-14 WebKit Web Inspector Cross Site Scripting Vulnerability
2009-12-11 Symantec Veritas VRTSweb Incoming Data Remote Code Execution Vulnerability
2009-12-11 HP OpenView Network Node Manager Perl CGI Executables Remote Code Execution Vulnerability