Title : Intel Desktop Board BIOS Unauthorized Downgrade Security Issue
VUPEN ID : VUPEN/ADV-2009-2953
CVE ID : GENERIC-MAP-NOMATCH
CWE ID : VUPEN VNS Only
CVSS V2 : VUPEN VNS Only
Rated as : Low Risk 
Remotely Exploitable : No
Locally Exploitable : Yes
Release Date : 2009-10-19


세부설명
==========
Intel Desktop board 제품들에서 로컬 공격자가 제한된 보안을 우회할 수 있는 보안문제가 확인되었다.
이 문제는 이전 BIOS 버전으로 하향할 때(downgrading) 관리자로부터 명확한 확인을 요구하지 않아 발생하는
문제이다. 이것은 악의적인 사용자가 보안이 낮고 취약한 이전 BIOS 버전으로 flash할 수 있다.


해결책
==========
Apply update :
http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00019


레퍼런스
==========
http://www.vupen.com/english/advisories/2009/2953
http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00019


영향받는 버전
==========
Intel Desktop Board D5400XS
Intel Desktop Board DX58SO
Intel Desktop Board DX48BT2
Intel Desktop Board DX38BT
Intel Desktop Board DP45SG
Intel Desktop Board DQ45CB
Intel Desktop Board DQ45EK
Intel Desktop Board DQ43AP
Intel Desktop Board DB43LD
Intel Desktop Board DG41MJ
Intel Desktop Board DG41RQ
Intel Desktop Board DG41TY
Intel Desktop Board DG45ID
Intel Desktop Board DG45FC
Intel Desktop Board DG43NB
Intel Desktop Board DP43TF
Intel Desktop Board DQ35EC
Intel Desktop Board DQ35JO
Intel Desktop Board DQ35MP
Intel Desktop Board DG35EC
Intel Desktop Board DG33BU
Intel Desktop Board DG33FB
Intel Desktop Board DG33TL
Intel Desktop Board DG31GL
Intel Desktop Board DG31PR
Intel Desktop Board DP35DP
Intel Desktop Board D945GSEJT
Intel Desktop Board D945GCLF
Intel Desktop Board D945GCLF2
와우해커(WOWHACKER) 시누싱입니다.