PT-2008-5933 · Sun · Integrated Lights Out Manager

Publicado 2008-10-23 · Atualizado 2017-08-08 · CVE-2008-4722

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Integrated Lights-Out Manager (ILOM) versions 2.0.1.5 through 2.0.4.26

Description The issue allows remote authenticated users to access the service processor and cause a denial of service, such as shutdown or reboot, or access the host operating system with an unspecified impact. The exact vectors of the attack are unknown.

Recommendations For versions 2.0.1.5 through 2.0.4.26, update to a version outside of this range to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-4722

Produtos afetados

Integrated Lights Out Manager

Referências · 7

• http://securityfocus.com/bid/31861 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46023 · Nota
• http://vupen.com/english/advisories/2008/2890 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-243486-1 · Aviso do Fabricante
• http://secunia.com/advisories/32298 · Aviso do Fabricante
• http://securitytracker.com/id?1021094 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4722 · Nota de Segurança