CVE:CVE-2008-3895
CNNVD:CNNVD-200809-039
lilo是个Linux系统核心载入程序，同时具备管理开机的功能。
LILO 22.6.1以及之前的版本在BIOS键盘缓冲区内储存pre-boot权限密码而且不会在使用后清空该缓冲区，本地用户可以通过读取与该缓冲区有关的物理内存位置来获得敏感信息。
solution:Upgrade lilo lilo to a higher version than 22.6.1,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,21-3,21.4.2,21.4.3,21.4.4,21.5,21.5.1,21.6,21.6.1,21.7,21.7.1,21.7.2,21.7.3,21.7.4,21.7.5,22.0,22.0.1,22.0.2,22.1,22.2,22.3,22.3.1,22.3.2,22.3.3,22.3.4,22.4,22.4.1,22.5,22.5.1,22.5.2,22.5.3,22.5.3.1,22.5.4,22.5.5,22.5.6,22.5.7,22.5.7.2,22.5.8,22.5.9,22.6,and avoid the version (,22.6.1],0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,21-3,21.4.2,21.4.3,21.4.4,21.5,21.5.1,21.6,21.6.1,21.7,21.7.1,21.7.2,21.7.3,21.7.4,21.7.5,22.0,22.0.1,22.0.2,22.1,22.2,22.3,22.3.1,22.3.2,22.3.3,22.3.4,22.4,22.4.1,22.5,22.5.1,22.5.2,22.5.3,22.5.3.1,22.5.4,22.5.5,22.5.6,22.5.7,22.5.7.2,22.5.8,22.5.9,22.6