CVE-2009-4128

CVE-2009-4128 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

GNU GRand Unified Bootloader (GRUB) 2 1.97 only compares the submitted portion of a password with the actual password, which makes it easier for physically proximate attackers to conduct brute force attacks and bypass authentication by submitting a password whose length is 1.

Learn more about our Physical Security Assessment.