PT-2007-6702 · Sun · Embedded Lights Out Manager+2

Published 2007-10-30 · Updated 2017-07-29 · CVE-2007-5717

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM) versions prior to firmware 2.70

Description The issue allows remote attackers to execute arbitrary commands as root on the Service Processor (SP) via unspecified vectors.

Recommendations For Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM) versions prior to firmware 2.70, update to firmware 2.70 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-5717

Affected Products

Embedded Lights Out Manager

Sun Fire X2100 M2

Sun Fire X2200 M2

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2007-5717 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-200667-1 · Vendor Advisory
• http://secunia.com/advisories/27416 · Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-103127-1 · Patch, Vendor Advisory
• http://vupen.com/english/advisories/2007/3652 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38149 · Note
• http://osvdb.org/40835 · Note
• http://securityfocus.com/bid/26250 · Note
• http://securitytracker.com/id?1018869 · Note