PT-2008-5933 · Sun · Integrated Lights Out Manager

Published 2008-10-23 · Updated 2017-08-08 · CVE-2008-4722

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Integrated Lights-Out Manager (ILOM) versions 2.0.1.5 through 2.0.4.26

Description The issue allows remote authenticated users to access the service processor and cause a denial of service, such as shutdown or reboot, or access the host operating system with an unspecified impact. The exact vectors of the attack are unknown.

Recommendations For versions 2.0.1.5 through 2.0.4.26, update to a version outside of this range to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-4722

Affected Products

Integrated Lights Out Manager

References · 7

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-243486-1 · Vendor Advisory
• http://secunia.com/advisories/32298 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-4722 · Security Note
• http://securityfocus.com/bid/31861 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46023 · Note
• http://vupen.com/english/advisories/2008/2890 · Note
• http://securitytracker.com/id?1021094 · Note