CVE-2011-4339: Incorrect Permission Assignment for Critical Resource

ipmievd aka the IPMI event daemon in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux RHEL 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this fil...

RHEL 6 : ipmitool (RHSA-2011:1814)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:1814 advisory. The ipmitool package contains a command line utility for interfacing with devices that support the Intelligent Platform Management Interface IPMI...

Moderate: Red Hat Security Advisory: ipmitool security update

An updated ipmitool package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

PT-2011-1131

Name of the Vulnerable Software and Affected Versions ipmitool versions 1.8.11 ipmitool-debuginfo versions 1.8.11 Description The issue allows local users to kill arbitrary processes by writing to the ipmievd.pid PID file, which has 0666 permissions. This can lead to disruption of integrity and...

Cisco ACS 1121 Default Credentials

Cisco ACS 1121 hardware appliance uses OEM IBM xSeries server platform which includes a Baseboard Management Controller. The controller acquires a DHCP address on ethernet port and has default credentials enabled "USERID" and "PASSW0RD". BCM is accessible using the IPMI protocol via free tool suc...

CVE-2007-2387

Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool...

CVE-2007-2387

Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool...

CVE-2007-2387: Undefined Security Weakness

Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool...

Sun Ipmitool接口远程非授权访问漏洞

Sun Fire是Sun推出的系列中端服务器。 Sun Fire系统的ipmitool1m工具在实现上存在安全漏洞，可能允许非特权用户获得非授权的管理权限，然后重置或关闭本地或远程的SunFire X2100M2或SunFire X2200M2服务器。 这个漏洞不影响不影响SPARC平台。 Sun Fire X2200 M2 Server Sun Fire X2100 M2 Server Sun --- Sun已经为此发布了一个安全公告（Sun-Alert-102828）以及相应补丁: Sun-Alert-102828：Security Vulnerability in the...

Sun SunFire ipmitool privilege escalation

No description provided...

Code injection

Unspecified vulnerability in ipmitool for Sun Fire X2100M2 and X2200M2 allows local users to gain privileges and reset or turn off the server...

CVE-2007-1346

Unspecified vulnerability in ipmitool for Sun Fire X2100M2 and X2200M2 allows local users to gain privileges and reset or turn off the server...

CVE-2007-1346

CVE-2007-1346 concerns ipmitool on Sun Fire X2100M2 and X2200M2. The connected sources indicate a local privilege escalation where a local user can gain elevated privileges and has the ability to reset or power off the server. The exact root cause, affected versions, and exploitation details are ...

CVE-2007-1346

Unspecified vulnerability in ipmitool for Sun Fire X2100M2 and X2200M2 allows local users to gain privileges and reset or turn off the server...

CVE-2007-1346: Undefined Security Weakness

Unspecified vulnerability in ipmitool for Sun Fire X2100M2 and X2200M2 allows local users to gain privileges and reset or turn off the server...