Thursday, December 17, 2015

Breaking Into Linux: 28 Backspace Key Presses


It was just announced that there is a vulnerability with a lot of Linux systems. If you press the backspace key 28 times when the user login screen is up, the machine will launch a Grub rescue mode that gives full access to files/data. See more here.

There is a patch available for most systems, please see this for more:

http://hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-bypass.html#fix


Try it on your own system to see if you're apart of this and then patch/prepare accordingly.


No comments:

Post a Comment