The password checking routine of Grub fails to sanitize the BIOS keyboard buffer before AND after reading passwords.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/69379/IVIZ-08-009.txt
Source: https://packetstormsecurity.com/files/69379/IVIZ-08-009.txt.html