QwikSec

Security Database

CVE

CWE

Training

CVE-2009-4128

Published: Dec 1, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

GNU GRand Unified Bootloader (GRUB) 2 1.97 only compares the submitted portion of a password with the actual password, which makes it easier for physically proximate attackers to conduct brute force attacks and bypass authentication by submitting a password whose length is 1.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=555195

vdb-entry

gnugrub2-password-auth-bypass(54210)

vdb-entry

[oss-security] 20240116 CVE-2023-4001: a password bypass vulnerability in the downstream GRUB boot manager

mailing-list

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.