CVE-2013-3623

Multiple stack-based buffer overflows in cgi/closewindow.cgi in the web interface in the Intelligent Platform Management Interface IPMI with firmware before 3.15 SMTX9315 on Supermicro X9 generation motherboards allow remote attackers to execute arbitrary code via the 1 sesssid or 2 ACT parameter...

Stack overflow

Multiple stack-based buffer overflows in cgi/closewindow.cgi in the web interface in the Intelligent Platform Management Interface IPMI with firmware before 3.15 SMTX9315 on Supermicro X9 generation motherboards allow remote attackers to execute arbitrary code via the 1 sesssid or 2 ACT parameter...

CVE-2013-3622

The CVE-2013-3622 issue affects Supermicro X9 generation motherboards running firmware before 3.15 (SMT_X9_315). It is a buffer overflow in logout.cgi within IPMI, enabling remote authenticated users to execute arbitrary code via the SID parameter. Affected component: IPMI logout.cgi; root cause:...

CVE-2013-3622

Buffer overflow in logout.cgi in the Intelligent Platform Management Interface IPMI with firmware before 3.15 SMTX9315 on Supermicro X9 generation motherboards allows remote authenticated users to execute arbitrary code via the SID parameter...

CVE-2013-3623

CVE-2013-3623 affects Supermicro IPMI on X9 generation motherboards (web interface close_window.cgi). Affected firmware is before 3.15 (SMT_X9_315); the issue is a stack-based buffer overflow that allows remote code execution via parameters sess_sid or ACT. Public details in NVD, and exploits/poC...

CVE-2013-3623

Multiple stack-based buffer overflows in cgi/closewindow.cgi in the web interface in the Intelligent Platform Management Interface IPMI with firmware before 3.15 SMTX9315 on Supermicro X9 generation motherboards allow remote attackers to execute arbitrary code via the 1 sesssid or 2 ACT parameter...

PT-2013-4523

Name of the Vulnerable Software and Affected Versions Supermicro X9 generation motherboards with firmware before 3.15 SMT X9 315 Description The issue is related to a buffer overflow in the logout.cgi file within the Intelligent Platform Management Interface IPMI that can be exploited by remote...

PT-2013-4524

Name of the Vulnerable Software and Affected Versions Supermicro X9 generation motherboards with firmware before 3.15 SMT X9 315 Description The issue is related to multiple stack-based buffer overflows in the cgi/close window.cgi file within the web interface of the Intelligent Platform Manageme...

kernel security and bug fix update

kernel 2.6.18-371.3.1.0.1 - i386: fix MTRR code Zhenzhong Duan orabug 15862649 - oprofile x86, mm: Add getuserpagesfast orabug 14277030 - oprofile export getuserpagesfast function orabug 14277030 - oprofile oprofile, x86: Fix nmi-unsafe callgraph support orabug 14277030 - oprofile oprofile: use...

IPMI Cipher Suite 0 (Cipher Zero) Authentication Bypass Vulnerability (IPMI Protocol)

Intelligent Platform Management Interface IPMI services are prone to an authentication bypass vulnerability through the use of cipher suite 0 aka cipher zero. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

IPMI 'Null' Usernames Allowed (IPMI Protocol)

The remote Intelligent Platform Management Interface IPMI service allows SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

IPMI MD2 Auth Type Support Enabled (IPMI Protocol)

The remote Intelligent Platform Management Interface IPMI service has MD2 auth type support enabled. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

IPMI Anonymous Login Enabled (IPMI Protocol)

The remote Intelligent Platform Management Interface IPMI service accepts anonymous logins. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

Intelligent Platform Management Interface (IPMI) Detection (IPMI Protocol)

Detection of services supporting the Intelligent Platform Management Interface IPMI. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Supermicro Onboard IPMI - 'close_window.cgi' Remote Buffer Overflow (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Supermicro Onboard IPMI closewindow.cgi Buffer Overflow', 'Description' = %q This module exploits a buffer overflow on the Supermicro...

Supermicro Onboard IPMI close_window.cgi Buffer Overflow

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Supermicro Onboard IPMI closewindow.cgi Buffer Overflow', 'Description' = %q This module exploits a buffer overflow on the Supermicro...

Supermicro Onboard IPMI close_window.cgi Buffer Overflow Vulnerability

This Metasploit module exploits a buffer overflow on the Supermicro Onboard IPMI controller web interface. The vulnerability exists on the closewindow.cgi CGI application, and is due to the insecure usage of strcpy. In order to get a session, the module will execute system from libc with an...

Supermicro IPMI Firmware CGI Scanner Remote Code Execution (CVE-2013-3621; CVE-2013-3623)

A buffer overflow vulnerability has been reported in the Supermicro IPMI Firmware. A remote attacker may exploit this issue by sending specially crafted messages to the target server. Exploitation of these vulnerabilities may result in remote code execution as the root user account...

Supermicro Onboard IPMI Static SSL Certificate Scanner Information Disclosure (CVE-2013-3619)

An SSL keys handling flaw has been reported in Supermicro IPMI firmware...

Supermicro Onboard IPMI Authenticated Directory Traversal

A directory traversal vulnerability has been reported in Supermicro Onboard IPMI. The vulnerability is due to lack of sanitization of the URL parameters. A remote attacker could exploit this vulnerability by sending a crafted request to an affected server. Successful exploitation may allow an...