HP Proliant DL585 Server Unauthorized Remote Access Vulnerability
BID:14540
Info
HP Proliant DL585 Server Unauthorized Remote Access Vulnerability
| Bugtraq ID: | 14540 |
| Class: | Access Validation Error |
| CVE: |
CVE-2005-2552 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 10 2005 12:00AM |
| Updated: | Jul 12 2009 05:06PM |
| Credit: | The vendor announced this vulnerability. |
| Vulnerable: |
HP Proliant DL585 Server HP ProLiant DL585 Integrated Lights Out 1.81 HP ProLiant DL585 Integrated Lights Out 1.80 |
| Not Vulnerable: |
HP ProLiant DL585 Integrated Lights Out 1.82 HP ProLiant DL585 Integrated Lights Out 1.81 |
Discussion
HP Proliant DL585 Server Unauthorized Remote Access Vulnerability
HP Proliant DL585 Server is affected by an unauthorized access vulnerability.
When the server is powered down, a remote attacker can gain access to the server controls.
Very little information is available on this issue; this BID will be updated as more information becomes available.
HP Proliant DL585 Server is affected by an unauthorized access vulnerability.
When the server is powered down, a remote attacker can gain access to the server controls.
Very little information is available on this issue; this BID will be updated as more information becomes available.
Exploit / POC
HP Proliant DL585 Server Unauthorized Remote Access Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
HP Proliant DL585 Server Unauthorized Remote Access Vulnerability
Solution:
HP has announced they will soon be releasing an updated firmware version addressing this issue. Please see the referenced advisory for further information.
HP has released an updated version of advisory HPSBMA01220 (SSRT051005 rev.1 - HP ProLiant DL585 Servers Unauthorized Remote Access) to include HP ProLiant DL585 Integrated Lights Out 1.82, which is not affected by this vulnerability. Please see references for more information.
Solution:
HP has announced they will soon be releasing an updated firmware version addressing this issue. Please see the referenced advisory for further information.
HP has released an updated version of advisory HPSBMA01220 (SSRT051005 rev.1 - HP ProLiant DL585 Servers Unauthorized Remote Access) to include HP ProLiant DL585 Integrated Lights Out 1.82, which is not affected by this vulnerability. Please see references for more information.
References
HP Proliant DL585 Server Unauthorized Remote Access Vulnerability
References:
References: