Oval Definition:
oval:org.mitre.oval:def:13918
Revision Date
:
2014-06-30
Version
:
20
Title
:
USN-868-1 -- grub2 vulnerability
Description
:
It was discovered that GRUB 2 did not properly validate passwords. An attacker with physical access could conduct a brute force attack and bypass authentication by submitting a 1 character password.
Family
:
unix
Class
:
patch
Status
:
ACCEPTED
Reference(s)
:
CVE-2009-4128
USN-868-1
USN-868-1
Platform(s)
:
Ubuntu 9.10
Product(s)
:
grub2
Definition Synopsis
Ubuntu 9.10 is installed
AND
Architecture section
Architecture depended section
Supported architectures section
Installed architecture is sparc
OR
Installed architecture is i386
OR
Installed architecture is amd64
OR
Installed architecture is lpia
AND
Packages section
grub-common DPKG is earlier than 1.97~beta4-1ubuntu4.1
OR
grub2 DPKG is earlier than 1.97~beta4-1ubuntu4.1
OR
grub-ieee1275 DPKG is earlier than 1.97~beta4-1ubuntu4.1
OR
grub-emu DPKG is earlier than 1.97~beta4-1ubuntu4.1
OR
Architecture depended section
Supported architectures section
Installed architecture is i386
OR
Installed architecture is amd64
OR
Installed architecture is lpia
AND
Packages section
grub-firmware-qemu DPKG is earlier than 1.97~beta4-1ubuntu4.1
OR
grub-linuxbios DPKG is earlier than 1.97~beta4-1ubuntu4.1
OR
grub-efi-ia32 DPKG is earlier than 1.97~beta4-1ubuntu4.1
OR
grub-rescue-pc DPKG is earlier than 1.97~beta4-1ubuntu4.1
OR
grub-pc DPKG is earlier than 1.97~beta4-1ubuntu4.1
OR
grub-efi DPKG is earlier than 1.97~beta4-1ubuntu4.1
OR
Supported platform section
Installed architecture is amd64
AND
Packages section
grub-efi-amd64 DPKG is earlier than 1.97~beta4-1ubuntu4.1
OR
grub-coreboot DPKG is earlier than 1.97~beta4-1ubuntu4.1
BACK