Intel LAN管理服务器配置漏洞

漏洞信息详情

Intel LAN管理服务器配置漏洞

漏洞简介

用于基于Intel Server Boards和Platforms智能平台接口(IPMI)1.5版本的固件与设置有效空参数的授权类型有效参数有关。远程攻击者启用LAN管理功能时可以利用该漏洞获得敏感信息。

漏洞公告

Intel has released an action alert AA-679-1 and a fix dealing with this issue.
The HP advisory HPSBGN01009 is also available.
Intel System Setup Utility

Intel Server Platform SRSH4

Intel Client System Setup Utility

HP Carrier Grade Server cc3310 A9862A

Intel Server Platform SPSH4

Intel Server Board SE7501HG2

Intel Server Configuration Wizard

HP Carrier Grade Server cc3310 A9863A

Intel Entry Server Platform SR1325TP1-E

HP Carrier Grade Server cc2300 A6899A

Intel Carrier Grade Server TIGPR2U

Intel Server Board SDS2

Intel Entry Server Board SE7210TP1-E

Intel Carrier Grade Server TSRLT2

Intel Server Board SE7500WV2

HP Carrier Grade Server cc2300 A6898A

Intel Server Control

Intel Server Platform SR870BH2

Intel Server Platform SR870BN4

Intel Server Board SCB2

HP Carrier Grade Server cc3300 A6901A

HP Carrier Grade Server cc3300 A6900A

Intel Server Board SHG2

Intel Carrier Grade Server TSRMT2

Intel CLI Auto-configuration Utility

参考网址

来源: SECUNIA
名称: 11315
链接:http://secunia.com/advisories/11315

来源: XF
名称: intel-ssu-gain-access(15775)
链接:http://xforce.iss.net/xforce/xfdb/15775

来源: BID
名称: 10068
链接:http://www.securityfocus.com/bid/10068

来源: OSVDB
名称: 4978
链接:http://www.osvdb.org/4978

来源: support.intel.com
链接:http://support.intel.com/support/motherboards/server/sb/CS-010422.htm

来源: download.intel.com
链接:ftp://download.intel.com/support/motherboards/server/sb/aa6791invalidlanconfiguration040504.pdf

© 版权声明
THE END
喜欢就支持一下吧
点赞0 分享