EUVD-2007-2382

Malware in sbrugna...

Default credentials

Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool...

CVE-2007-2387

Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool...

CVE-2007-2387

Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool...

CVE-2007-2387

The CVE-2007-2387 entry concerns Apple Xserve Lights-Out Management on Intel hardware prior to Firmware Update 1.0. The vulnerability is that IPMI remote access does not require a password, enabling an attacker to gain administrative access via remote requests using ipmitool. Impact is described ...

Apple Xserve Lights-Out管理系统IPMI远程权限提升漏洞

Xserve是苹果推出的高性能服务器。 Xserve内嵌的Lights-Out管理固件实现IPMI时存在错误，可能允许远程攻击者在以特殊方式配置了IPMI的服务器上获得管理权限。 Apple Xserve Lights-Out Management Firmware 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=14051&cat=1&platform=osx&method=sa/LOMUpdate.dmg...