Lucene search

[email protected]CVE-2007-0661

HistoryFeb 01, 2007 - 10:28 p.m.

CVE-2007-0661

2007-02-0122:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

intel

enterprise

southbridge

bmc

server

boards

ipmi

vulnerability

cve-2007-0661

denial of service

7.2 High

AI Score

Confidence

Low

5.4 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

79.5%

JSON

Intel Enterprise Southbridge 2 Baseboard Management Controller (BMC), Intel Server Boards 5000XAL, S5000PAL, S5000PSL, S5000XVN, S5000VCL, S5000VSA, SC5400RA, and OEM Firmware for Intel Enterprise Southbridge Baseboard Management Controller before 20070119, when Intelligent Platform Management Interface (IPMI) is enabled, allow remote attackers to connect and issue arbitrary IPMI commands, possibly triggering a denial of service.

CPENameOperatorVersion
intel:server_board_s5000xvnintel server board s5000xvneq*
intel:server_board_s5000vclintel server board s5000vcleq*
intel:server_board_s5000palintel server board s5000paleq*
intel:server_board_s5000pslintel server board s5000psleq*
intel:server_board_s5000vsaintel server board s5000vsaeq*
intel:server_board_s5000xalintel server board s5000xaleq*
intel:enterprise_southbridge_2_bmcintel enterprise southbridge 2 bmceq*
intel:enterprise_southbridge_bmcintel enterprise southbridge bmceq*
intel:server_board_sc5400raintel server board sc5400raeq*

CPE	Name	Operator	Version
intel:server_board_s5000xvn	intel server board s5000xvn	eq	*
intel:server_board_s5000vcl	intel server board s5000vcl	eq	*
intel:server_board_s5000pal	intel server board s5000pal	eq	*
intel:server_board_s5000psl	intel server board s5000psl	eq	*
intel:server_board_s5000vsa	intel server board s5000vsa	eq	*
intel:server_board_s5000xal	intel server board s5000xal	eq	*
intel:enterprise_southbridge_2_bmc	intel enterprise southbridge 2 bmc	eq	*
intel:enterprise_southbridge_bmc	intel enterprise southbridge bmc	eq	*
intel:server_board_sc5400ra	intel server board sc5400ra	eq	*

References

lz1.intel.com/psirt/advisory.aspx?intelid=INTEL-SA-00012&languageid=en-fr

osvdb.org/33044

secunia.com/advisories/23989

www.securityfocus.com/bid/22341

www.vupen.com/english/advisories/2007/0432

7.2 High

AI Score

Confidence

Low

5.4 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

79.5%

JSON

Related for CVE-2007-0661

securityvulns1 prion1