CVE-2007-2387 Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via u...
HighCVSS 10.0
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple xserve lights-out management | = firmware_0 | No fix listed |
References
- docs.info.apple.com patch
- APPLE-SA-2007-05-31 patch vendor-advisory
- 36128 vdb-entry
- 25499 patch third-party-advisory vendor-advisory
- www.apple.com
- 24257 patch vdb-entry
- 1018181 vdb-entry
- ADV-2007-2014 vdb-entry
- xserve-ipmi-privilege-escalation(34651) vdb-entry