CERTA-2009-AVI-308
Vulnerability from certfr_avis - Published: 2009-08-06 - Updated: 2009-08-06
Des vulnérabilités permettant l'élévation de privilèges ont été découvertes dans certaines versions des microgiciels des cartes mère Intel.
Description
Des vulnérabilités ont été découvertes dans certaines versions des microgiciels des cartes mère Intel. L'exploitation de ces vulnérabilités permet à une personne mal intentionnée de passer du niveau de droit ring0 à un niveau de droit supérieur (System Management Mode).
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Intel | N/A | cartes mère Intel pour serveurs : S3000 series, S3200 series, S5000 series, S5400 series, S5500. | ||
| Intel | N/A | Cartes mère Intel pour ordinateurs de bureau : D5400XS, DX58SO, DX48BT2, DX38BT, DP45SG, DQ45CB, DQ45EK, DQ43AP, DB43LD, DG41MJ, DG41RQ, DG41TY, DG45ID, DG45FC, DG43NB, DP43TF, DQ35JO, DQ35MP, DG33BU, DG33FB, DG33TL, DP35DP, D945GSEJT, D945GCLF, D945GCLF2 ; |
References
| Title | Publication Time | Tags | |
|---|---|---|---|
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "cartes m\u00e8re Intel pour serveurs : S3000 series, S3200 series, S5000 series, S5400 series, S5500.",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
},
{
"description": "Cartes m\u00e8re Intel pour ordinateurs de bureau : D5400XS, DX58SO, DX48BT2, DX38BT, DP45SG, DQ45CB, DQ45EK, DQ43AP, DB43LD, DG41MJ, DG41RQ, DG41TY, DG45ID, DG45FC, DG43NB, DP43TF, DQ35JO, DQ35MP, DG33BU, DG33FB, DG33TL, DP35DP, D945GSEJT, D945GCLF, D945GCLF2 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Intel",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nDes vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans certaines versions des\nmicrogiciels des cartes m\u00e8re Intel. L\u0027exploitation de ces vuln\u00e9rabilit\u00e9s\npermet \u00e0 une personne mal intentionn\u00e9e de passer du niveau de droit\nring0 \u00e0 un niveau de droit sup\u00e9rieur (System Management Mode).\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [],
"initial_release_date": "2009-08-06T00:00:00",
"last_revision_date": "2009-08-06T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-00018 du 28 juillet 2009 :",
"url": "http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00018\u0026languageid=en-fr\u0026cid=rss-172465-c1-236761"
}
],
"reference": "CERTA-2009-AVI-308",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2009-08-06T00:00:00.000000"
}
],
"risks": [
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "Des vuln\u00e9rabilit\u00e9s permettant l\u0027\u00e9l\u00e9vation de privil\u00e8ges ont \u00e9t\u00e9\nd\u00e9couvertes dans certaines versions des microgiciels des cartes m\u00e8re\nIntel.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s des cartes m\u00e8re Intel",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-00018 du 28 juillet 2009",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…