Lucene search
+L

959 matches found

CVE
CVE
added 2013/08/09 11:0 p.m.59 views

CVE-2013-4031

The CVE-2013-4031 issue affects IBM/Lenovo IMM/IMM2 IPMI implementations where a single preconfigured IPMI user account uses default credentials across affected systems (IBM BladeCenter, Flex System, System x iDataPlex, System x3###; Lenovo IMM/IMM2/TSM). The root cause is the presence of a defau...

10CVSS6.7AI score0.02044EPSS
SaveExploits0References2Affected Software30
CVE
CVE
added 2013/08/09 11:0 p.m.63 views

CVE-2013-4037

The CVE-2013-4037 issue concerns the RAKP-based authentication in IPMI on IBM/Lenovo IMM and IMM2 (various BladeCenter, Flex System, System x IMM/IMM2 platforms). The RAKP flow transmits a password hash to the client, enabling offline brute‑force/dictionary attacks to recover credentials. IBM’s a...

4.3CVSS6.6AI score0.00955EPSS
SaveExploits0References2Affected Software30
Cvelist
Cvelist
added 2013/08/09 11:0 p.m.30 views

CVE-2013-4031

The Intelligent Platform Management Interface IPMI implementation in Integrated Management Module IMM and Integrated Management Module II IMM2 on IBM BladeCenter, Flex System, System x iDataPlex, and System x3 servers has a default password for the IPMI user account, which makes it easier for...

6.5AI score0.02044EPSS
SaveExploits0References2
CVE
CVE
added 2013/08/09 11:0 p.m.63 views

CVE-2013-4038

The CVE-2013-4038 issue affects IBM IMM/IMM2 IPMI implementations (IBM BladeCenter, Flex System, System x iDataPlex, System x3###). Root cause: passwords for user accounts are stored in clear text in the IMM filesystem, enabling an attacker with access to the IMM OS to view credentials and potent...

4CVSS6.2AI score0.00791EPSS
SaveExploits0References2Affected Software30
Cvelist
Cvelist
added 2013/08/09 11:0 p.m.28 views

CVE-2013-4038

The Intelligent Platform Management Interface IPMI implementation in Integrated Management Module IMM on IBM BladeCenter, Flex System, System x iDataPlex, and System x3 servers uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information by reading...

6AI score0.00791EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2013/08/09 12:0 a.m.12 views

IPMI Server Detection (Certificate Email Check)

Binary data 6980.prm...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2013/08/09 12:0 a.m.10 views

IPMI Server Detection (HP Lights-Out)

Binary data 6981.prm...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2013/08/09 12:0 a.m.15 views

IPMI Server Detection (SSL Issuer Check)

Binary data 6983.prm...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2013/08/09 12:0 a.m.11 views

IPMI Server Detection (SSL Certificate Check)

Binary data 6985.prm...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2013/08/09 12:0 a.m.12 views

IPMI Server Detection (Dell iDRAC)

Binary data 6982.prm...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2013/07/29 12:0 a.m.14 views

IPMI Server Detection (Protocol Check)

Binary data 6951.prm...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2013/07/17 12:0 a.m.14 views

IPMI Cipher Suites Supported

Binary data ipmisupportedciphersuites.nbin...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2013/07/16 12:0 a.m.52 views

IPMI Cipher Suite Zero Authentication Bypass

Binary data ipmicipher0authbypass.nbin...

10CVSS7.3AI score0.49587EPSS
SaveExploits2References5
Tenable Nessus
Tenable Nessus
added 2013/07/16 12:0 a.m.200 views

Dell iDRAC6 Multiple Vulnerabilities

The remote Dell Integrated Remote Access Controller 6 iDRAC6 is affected by the following vulnerabilities : - A flaw exists in the testurls.html page that allows a remote attacker to authenticate as root. A remote attacker can exploit this to enable root user access over SSH, telnet, and other...

10CVSS5.7AI score0.03621EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2013/07/12 12:0 a.m.64 views

Oracle Linux 5 : kernel (ELSA-2010-0704)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0704 advisory. 2.6.18-194.11.4.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John...

7.8CVSS7.4AI score0.03533EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
added 2013/07/12 12:0 a.m.34 views

Oracle Linux 5 : kernel (ELSA-2010-0792)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0792 advisory. 2.6.18-194.17.4.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John...

7.8CVSS6.6AI score0.12159EPSS
SaveExploits16References2
Tenable Nessus
Tenable Nessus
added 2013/07/12 12:0 a.m.27 views

Oracle Linux 5 : kernel (ELSA-2013-0847-1)

From Red Hat Security Advisory 2013:0847 : Updated kernel packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVS...

4.7CVSS7.6AI score0.00411EPSS
SaveExploits0References2
Oracle linux
Oracle linux
added 2013/07/10 12:0 a.m.70 views

kernel security and bug fix update

kernel 2.6.18-348.12.1.0.1 - oprofile x86, mm: Add getuserpagesfast orabug 14277030 - oprofile export getuserpagesfast function orabug 14277030 - oprofile oprofile, x86: Fix nmi-unsafe callgraph support orabug 14277030 - oprofile oprofile: use KMNMI slot for kmapatomic orabug 14277030 - oprofile...

4.9CVSS0.4AI score0.00717EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
added 2013/07/09 12:0 a.m.5 views

Multiple Vendors IPMI 2.0 Authentication Bypass via Cipher 0

Authentication Bypass vulnerability have been reported in IPMI 2.0 Authentication. When using cipher type 0, it is an indicator that the client wants to use clear-text authentication,that allows access with any password...

7AI score
SaveExploits0
NVD
NVD
added 2013/07/08 10:55 p.m.38 views

CVE-2013-4782

The Supermicro BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 aka cipher zero and an arbitrary password...

10CVSS7.9AI score0.26016EPSS
SaveExploits2References5
Rows per page
Query Builder