Lucene search

[email protected]CVE-2004-2600

HistoryNov 29, 2005 - 2:00 a.m.

CVE-2004-2600

2005-11-2902:00:00

[email protected]

web.nvd.nist.gov

ipmi

intel server boards

firmware

remote attack

authentication

vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

84.1%

JSON

The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote attackers to obtain sensitive information when LAN management functionality is enabled.

Affected configurations

NVD

Node

intelcli_auto-configuration_utility

intelclient_system_setup_utility

intelserver_configuration_wizard

intelserver_control

intelsystem_setup_utility

intelcarrier_grade_server_tigpr2u

intelcarrier_grade_server_tsrlt2

intelcarrier_grade_server_tsrmt2

Node

hpcarrier_grade_server_cc2300Matcha6898a

hpcarrier_grade_server_cc2300Matcha6899a

hpcarrier_grade_server_cc3300Matcha6900a

hpcarrier_grade_server_cc3300Matcha6901a

hpcarrier_grade_server_cc3310Matcha9862a

hpcarrier_grade_server_cc3310Matcha9863a

intelentry_server_board_se7210tp1-e

intelentry_server_platform_sr1325tp1-e

intelserver_board_scb2

intelserver_board_sds2

intelserver_board_se7500wv2

intelserver_board_se7501hg2

intelserver_board_shg2

intelserver_platform_spsh4

intelserver_platform_sr870bh2

intelserver_platform_sr870bn4

intelserver_platform_srsh4

CPENameOperatorVersion
intel:cli_auto-configuration_utilityintel cli auto-configuration utilityeq*
intel:client_system_setup_utilityintel client system setup utilityeq*
intel:server_configuration_wizardintel server configuration wizardeq*
intel:server_controlintel server controleq*
intel:system_setup_utilityintel system setup utilityeq*
intel:carrier_grade_server_tigpr2uintel carrier grade server tigpr2ueq*
intel:carrier_grade_server_tsrlt2intel carrier grade server tsrlt2eq*
intel:carrier_grade_server_tsrmt2intel carrier grade server tsrmt2eq*

CPE	Name	Operator	Version
intel:cli_auto-configuration_utility	intel cli auto-configuration utility	eq	*
intel:client_system_setup_utility	intel client system setup utility	eq	*
intel:server_configuration_wizard	intel server configuration wizard	eq	*
intel:server_control	intel server control	eq	*
intel:system_setup_utility	intel system setup utility	eq	*
intel:carrier_grade_server_tigpr2u	intel carrier grade server tigpr2u	eq	*
intel:carrier_grade_server_tsrlt2	intel carrier grade server tsrlt2	eq	*
intel:carrier_grade_server_tsrmt2	intel carrier grade server tsrmt2	eq	*

References

ftp://download.intel.com/support/motherboards/server/sb/aa6791invalidlanconfiguration040504.pdf

secunia.com/advisories/11315

support.intel.com/support/motherboards/server/sb/CS-010422.htm

www.osvdb.org/4978

www.securityfocus.com/bid/10068

exchange.xforce.ibmcloud.com/vulnerabilities/15775

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

84.1%

JSON

Related for CVE-2004-2600

cvelist1 nvd1