CVE-2017-3774

A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 IMM2 earlier than version 4.70 used in some Lenovo servers and earlier than version 6.60 used in some IBM servers. An attacker providing a crafted user ID and password combination...

PT-2018-7266

Name of the Vulnerable Software and Affected Versions: Integrated Management Module 2 IMM2 versions earlier than 4.70 Integrated Management Module 2 IMM2 versions earlier than 6.60 Description: A stack overflow issue was found in the web administration service. It can be triggered by providing a...

CVE-2017-3774: Improper Restriction of Operations within the Bounds of a Memory Buffer

A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 IMM2 earlier than version 4.70 used in some Lenovo servers and earlier than version 6.60 used in some IBM servers. An attacker providing a crafted user ID and password combination...

CVE-2017-3768

An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 Versions earlier than 4.4 for Lenovo System x and earlier than 6.4 for IBM System x. Flooding the IMM2 with a high volume of authentication failures via the Common Information Model CIM used ...

CVE-2014-0860: Undefined Security Weakness

The firmware before 3.66E in IBM BladeCenter Advanced Management Module AMM, the firmware before 1.43 in IBM Integrated Management Module IMM, and the firmware before 4.15 in IBM Integrated Management Module II IMM2 contains cleartext IPMI credentials, which allows attackers to execute arbitrary...

PT-2014-3898

Name of the Vulnerable Software and Affected Versions IBM BladeCenter Advanced Management Module AMM versions prior to 3.66E IBM Integrated Management Module IMM versions prior to 1.43 IBM Integrated Management Module II IMM2 versions prior to 4.15 Description The issue allows attackers to execut...

CVE-2013-4030: Undefined Security Weakness

Integrated Management Module IMM 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against 1 SSL or 2 TLS traffic...

PT-2014-2732

Name of the Vulnerable Software and Affected Versions Integrated Management Module IMM 2 versions 1.00 through 2.00 Description The issue allows remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against SSL or TLS traffic, due to the support of SSL cipher...

PT-2013-4807

Name of the Vulnerable Software and Affected Versions Integrated Management Module IMM on IBM BladeCenter, Flex System, System x iDataPlex, and System x3 servers affected versions not specified Description The issue concerns the Intelligent Platform Management Interface IPMI implementation in...

CVE-2013-4031: Undefined Security Weakness

The Intelligent Platform Management Interface IPMI implementation in Integrated Management Module IMM and Integrated Management Module II IMM2 on IBM BladeCenter, Flex System, System x iDataPlex, and System x3 servers has a default password for the IPMI user account, which makes it easier for...

PT-2013-4806

Name of the Vulnerable Software and Affected Versions Integrated Management Module IMM and Integrated Management Module II IMM2 affected versions not specified Description The issue concerns the RAKP protocol support in the Intelligent Platform Management Interface IPMI implementation, which send...

CVE-2013-4038: Undefined Security Weakness

The Intelligent Platform Management Interface IPMI implementation in Integrated Management Module IMM on IBM BladeCenter, Flex System, System x iDataPlex, and System x3 servers uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information by reading...

PT-2012-5602

Name of the Vulnerable Software and Affected Versions IBM Flex System Chassis Management Module CMM and Integrated Management Module 2 IMM2 affected versions not specified Description The issue allows local users to obtain sensitive information, including local accounts, SSH private keys, SSL/TLS...

CVE-2012-4838: Undefined Security Weakness

IBM Flex System Chassis Management Module CMM and Integrated Management Module 2 IMM2 allow local users to obtain sensitive information about 1 local accounts, 2 SSH private keys, 3 SSL/TLS private keys, 4 SNMPv3 communities, and 5 LDAP credentials by leveraging unspecified side effects of servic...

Using Flash upload loopholes to penetrate a server-vulnerability warning-the black bar safety net

Now a lot of sites in order to pursue the image, on the site home page using Flash rotate display, and some use the picture show;the site of the most core things content, in order to keep the site effect, and therefore will frequently update the picture or flash file in website background design...