CVE-2009-4128

CVE-2009-4128 describes a vulnerability in GNU GRand Unified Bootloader (GRUB) 2 version 1.97 where the bootloader only compares a partial password, specifically the first character, making it susceptible to brute-force attacks. This local vulnerability (AV:L) has low attack complexity (AC:L) and requires no authentication (Au:N), allowing a physically proximate attacker to bypass authentication and gain full confidentiality, integrity, and availability (C:C/I:C/A:C). While rated with a CVSS score of 7.2, there is no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB, and it has received minimal community discussion or media coverage.