NVD

Id
54554  
Name
CVE-2007-2387  
Description
Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-06-04  
Modified Date
2011-03-07  
Seq
2007-2387  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
276630 54554 CVE-2007-2387 http://docs.info.apple.com/article.html?artnum=305571  View
276631 54554 CVE-2007-2387 APPLE-SA-2007-05-31  View
276632 54554 CVE-2007-2387 http://www.apple.com/support/downloads/xservelightsoutmanagementfirmwareupdate10.html  View
276633 54554 CVE-2007-2387 24257  View
276634 54554 CVE-2007-2387 1018181  View
276635 54554 CVE-2007-2387 ADV-2007-2014  View
276636 54554 CVE-2007-2387 xserve-ipmi-privilege-escalation(34651)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53244 JVNDB-2007-001936 Intel ハードウェア上の Apple Xserve Lights-Out Management における管理アクセス権を取得される脆弱性 Intel ハードウェア上で稼動する Apple Xserve Lights-Out Management は、IPMI へのリモートアクセス用のパスワードを要求しないため、管理アクセス権を取得される脆弱性が存在します。 CVE-2007-2387 25742 CVE-2007-2387 54554 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001936.html 2007-05-31 2012-06-26 View