HP Integrity Servers iLO-2 Management Processors Denial Of Service Vulnerability

Bugtraq ID:	28673
Class:	Unknown
CVE:	CVE-2008-0711
Remote:	Yes
Local:	No
Published:	Apr 07 2008 12:00AM
Updated:	Apr 08 2008 05:38PM
Credit:	HP
Vulnerable:	HP HP Integrity Server iLO-2 Management Processors 0
Not Vulnerable:

HP Integrity Servers iLO-2 Management Processors Denial Of Service Vulnerability

HP Integrity Servers running iLO-2 Management Processors (iLO-2 MP) are prone to a denial-of-service vulnerability that affects the embedded management console.

Remote attackers can exploit this issue to deny service to legitimate users.

The following products are affected:
- HP Integrity Server model numbers rx2660, rx3600, rx6600 with iLO-2 MP firmware F.01.58 and earlier
- HP Integrity Blade Server model bl860c with iLO-2 MP firmware T.01.22 and earlier

HP Integrity Servers iLO-2 Management Processors Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP Integrity Servers iLO-2 Management Processors Denial Of Service Vulnerability

Solution:
The vendor released firmware updates to address this issue. Please see the references for more information on obtaining and applying fixes.

HP Integrity Servers iLO-2 Management Processors Denial Of Service Vulnerability

References:

• HP Integrity Servers Homepage (HP)
  
• HPSBMA02327 SSRT071455 - HP Integrity Servers iLO-2 Management Processors (iLO-2 (HP)