Some of Our Sources
- Mashable
- Techcrunch
- TutsPlus - Code
- Joshua Blankenship
- Pearsonified
- Spoon Graphics
- Smashing Apps
- Abduzeedo
- Creative Curio
- Android Dissected
Help Webnuz
Referal links:
December 16, 2015 02:00 pm
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/ax24U0XsOpM/0-day-grub2-authentication-bypass-hits-linux
0-Day GRUB2 Authentication Bypass Hits Linux
prisoninmate writes: A zero-day security flaw was discovered by developers Ismael Ripoll and Hector Marco in the upstream GRUB2 packages. GRUB2 did not correctly handle the backspace key when the bootloader was configured to use password protected authentication, thus allowing a local attacker to bypass GRUB's password protection. Versions from 1.98 (December, 2009) to 2.02 (December, 2015) are affected. At the moment, it looks like only a few distributions received the patched GRUB2 versions, including Ubuntu, Debian (Squeeze LTS only) and Red Hat Enterprise Linux 7.Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/ax24U0XsOpM/0-day-grub2-authentication-bypass-hits-linux
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot