Apple Xserve Lights-Out Management Firmware IPMI Remote Privilege Escalation Vulnerability

Bugtraq ID:	24257
Class:	Boundary Condition Error
CVE:	CVE-2007-2387
Remote:	Yes
Local:	No
Published:	May 31 2007 12:00AM
Updated:	Jun 01 2007 04:31PM
Credit:	Credit to James Wilson of LithiumCorp is credited with discovering this issue.
Vulnerable:	Apple Xserve Lights-Out Management Firmware 0
Not Vulnerable:

Apple Xserve Lights-Out Management Firmware IPMI Remote Privilege Escalation Vulnerability

Apple Xserve Lights-Out Management Firmware is prone to a remote privilege-escalation vulnerability.

Successful exploits will allow remote attackers to gain administrative privileges on the affected server.

This issue affects Intel-based Xservers running Lights-Out Management Firmware configured in a particular manner.

Apple Xserve Lights-Out Management Firmware IPMI Remote Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Apple Xserve Lights-Out Management Firmware IPMI Remote Privilege Escalation Vulnerability

Solution:
The vendor released an advisory and fixes to address this issue. Please see the references for more information.


Apple Xserve Lights-Out Management Firmware 0

• Apple LOMUpdate.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=14051&cat= 1&platform=osx&method=sa/LOMUpdate.dmg

Apple Xserve Lights-Out Management Firmware IPMI Remote Privilege Escalation Vulnerability

References:

• About the security content of Xserve Lights-Out Management Firmware Update 1.0 (Apple)
  
• Apple Xserve Homepage (Apple)