CVE-2013-3623

Multiple stack-based buffer overflows in cgi/closewindow.cgi in the web interface in the Intelligent Platform Management Interface IPMI with firmware before 3.15 SMTX9315 on Supermicro X9 generation motherboards allow remote attackers to execute arbitrary code via the 1 sesssid or 2 ACT parameter...

CVE-2013-3623

CVE-2013-3623 affects Supermicro IPMI on X9 generation motherboards (web interface close_window.cgi). Affected firmware is before 3.15 (SMT_X9_315); the issue is a stack-based buffer overflow that allows remote code execution via parameters sess_sid or ACT. Public details in NVD, and exploits/poC...

CVE-2013-3622

Buffer overflow in logout.cgi in the Intelligent Platform Management Interface IPMI with firmware before 3.15 SMTX9315 on Supermicro X9 generation motherboards allows remote authenticated users to execute arbitrary code via the SID parameter...

CVE-2013-3622

The CVE-2013-3622 issue affects Supermicro X9 generation motherboards running firmware before 3.15 (SMT_X9_315). It is a buffer overflow in logout.cgi within IPMI, enabling remote authenticated users to execute arbitrary code via the SID parameter. Affected component: IPMI logout.cgi; root cause:...

kernel security and bug fix update

kernel 2.6.18-371.3.1.0.1 - i386: fix MTRR code Zhenzhong Duan orabug 15862649 - oprofile x86, mm: Add getuserpagesfast orabug 14277030 - oprofile export getuserpagesfast function orabug 14277030 - oprofile oprofile, x86: Fix nmi-unsafe callgraph support orabug 14277030 - oprofile oprofile: use...

IPMI Cipher Suite 0 (Cipher Zero) Authentication Bypass Vulnerability (IPMI Protocol)

Intelligent Platform Management Interface IPMI services are prone to an authentication bypass vulnerability through the use of cipher suite 0 aka cipher zero. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

IPMI MD2 Auth Type Support Enabled (IPMI Protocol)

The remote Intelligent Platform Management Interface IPMI service has MD2 auth type support enabled. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Intelligent Platform Management Interface (IPMI) Detection (IPMI Protocol)

Detection of services supporting the Intelligent Platform Management Interface IPMI. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

IPMI Anonymous Login Enabled (IPMI Protocol)

The remote Intelligent Platform Management Interface IPMI service accepts anonymous logins. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

IPMI 'Null' Usernames Allowed (IPMI Protocol)

The remote Intelligent Platform Management Interface IPMI service allows SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Supermicro Onboard IPMI - 'close_window.cgi' Remote Buffer Overflow (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Supermicro Onboard IPMI closewindow.cgi Buffer Overflow', 'Description' = %q This module exploits a buffer overflow on the Supermicro...

Supermicro Onboard IPMI close_window.cgi Buffer Overflow

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Supermicro Onboard IPMI closewindow.cgi Buffer Overflow', 'Description' = %q This module exploits a buffer overflow on the Supermicro...

Supermicro Onboard IPMI close_window.cgi Buffer Overflow Vulnerability

This Metasploit module exploits a buffer overflow on the Supermicro Onboard IPMI controller web interface. The vulnerability exists on the closewindow.cgi CGI application, and is due to the insecure usage of strcpy. In order to get a session, the module will execute system from libc with an...

Supermicro IPMI Firmware CGI Scanner Remote Code Execution (CVE-2013-3621; CVE-2013-3623)

A buffer overflow vulnerability has been reported in the Supermicro IPMI Firmware. A remote attacker may exploit this issue by sending specially crafted messages to the target server. Exploitation of these vulnerabilities may result in remote code execution as the root user account...

Supermicro Onboard IPMI Static SSL Certificate Scanner Information Disclosure (CVE-2013-3619)

An SSL keys handling flaw has been reported in Supermicro IPMI firmware...

Supermicro Onboard IPMI Authenticated Directory Traversal

A directory traversal vulnerability has been reported in Supermicro Onboard IPMI. The vulnerability is due to lack of sanitization of the URL parameters. A remote attacker could exploit this vulnerability by sending a crafted request to an affected server. Successful exploitation may allow an...

Super Micro IPMI zero-day vulnerabilities disclosed

Metasploit creator and Rapid7 CSO HD Moore today disclosed seven zero-day vulnerabilities in IPMI firmware from vendor Super Micro. The security issues were reported to the vendor in August, however the vendor, beyond acknowledging receipt of the vulnerabilities never communicated with Rapid7...

Supermicro Onboard IPMI Static SSL Certificate Scanner

This module checks for a static SSL certificate shipped with Supermicro Onboard IPMI controllers. An attacker with access to the publicly-available firmware can perform man-in-the-middle attacks and offline decryption of communication to the controller. This module has been on a Supermicro Onboar...

Supermicro Onboard IPMI url_redirect.cgi Authenticated Directory Traversal

This module abuses a directory traversal vulnerability in the urlredirect.cgi application accessible through the web interface of Supermicro Onboard IPMI controllers. The vulnerability is present due to a lack of sanitization of the urlname parameter. This allows an attacker with a valid, but not...

Supermicro Onboard IPMI CGI Vulnerability Scanner

This module checks for known vulnerabilities in the CGI applications of Supermicro Onboard IPMI controllers. These issues currently include several unauthenticated buffer overflows in the login.cgi and closewindow.cgi components. Module Options msf use auxiliary/scanner/http/smt/ipmicgiscanner ms...