The password checking routine of LILO fails to sanitize the BIOS keyboard buffer before AND after reading passwords.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/69378/IVIZ-08-008.txt
Source: https://packetstormsecurity.com/files/69378/IVIZ-08-008.txt.html