Thread Status:

Not open for further replies.

1. 

   TS4H Registered Member

   Joined:

   Nov 5, 2013

   Posts:

   523

   Location:

   Australia

   http://hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-bypass.html#exploit
   
   

    

   TS4H, Dec 19, 2015

   #1
2. 

   inka Registered Member

   Joined:

   Oct 21, 2009

   Posts:

   426

   I've never seen a grub2 prompt which asked for a username; I didn't even know that (feature) was possible.
   
   (it is possible. I just now checked http://www.gnu.org/software/grub/manual/grub.html#Security )

    

   inka, Dec 19, 2015

   #2
3. 

   chrisretusn Registered Member

   Joined:

   Jun 16, 2004

   Posts:

   1,672

   Location:

   Philippines

   It's been patched in Slackware.

    

   chrisretusn, Dec 19, 2015

   #3
4. 

   Amanda Registered Member

   Joined:

   Aug 8, 2013

   Posts:

   2,115

   Location:

   Brasil

   Already being discussed: https://www.wilderssecurity.com/thre...users-patch-available-for-ubuntu-rhel.382337/

    

   Amanda, Dec 19, 2015

   #4
5. 

   ronjor Global Moderator

   Joined:

   Jul 21, 2003

   Posts:

   164,138

   Location:

   Texas

   Let's post over there.

    

   ronjor, Dec 19, 2015

   #5

Thread Status:

Not open for further replies.

Your username or email address:

Do you already have an account?

• No, create an account now.
• Yes, my password is:
• Forgot your password?

Stay logged in