Supermicro IPMI Web Interface Multiple Stack-Based Buffer Overflow Vulnerabilities
BID:62094
Info
Supermicro IPMI Web Interface Multiple Stack-Based Buffer Overflow Vulnerabilities
| Bugtraq ID: | 62094 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2013-3607 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 30 2013 12:00AM |
| Updated: | Sep 09 2016 03:00PM |
| Credit: | J. Alex Halderman |
| Vulnerable: |
Super Micro Computer Supermicro X9SRL-F Super Micro Computer Supermicro X9SRi-F Super Micro Computer Supermicro X9SRi-3F Super Micro Computer Supermicro X9SRG-F Super Micro Computer Supermicro X9SRE-F Super Micro Computer Supermicro X9SRE-3F Super Micro Computer Supermicro X9SRD-F Super Micro Computer Supermicro X9SPU-F Super Micro Computer Supermicro X9SCM-iiF Super Micro Computer Supermicro X9SCM-F Super Micro Computer Supermicro X9SCL-F Super Micro Computer Supermicro X9SCL+-F Super Micro Computer Supermicro X9SCI-LN4F Super Micro Computer Supermicro X9SCFF-F Super Micro Computer Supermicro X9SCE-F Super Micro Computer Supermicro X9SCD-F Super Micro Computer Supermicro X9SCA-F Super Micro Computer Supermicro X9SBAA-F Super Micro Computer Supermicro X9QRi-F+ Super Micro Computer Supermicro X9QRi-F Super Micro Computer Supermicro X9QR7-TF-JBOD Super Micro Computer Supermicro X9QR7-TF+ Super Micro Computer Supermicro X9QR7-TF Super Micro Computer Supermicro X9DRX+-F Super Micro Computer Supermicro X9DRW-iTPF Super Micro Computer Supermicro X9DRW-7TPF+ Super Micro Computer Supermicro X9DRW-3TF+ Super Micro Computer Supermicro X9DRW-3LN4F+ Super Micro Computer Supermicro X9DRT-IBQF Super Micro Computer Supermicro X9DRT-IBFF Super Micro Computer Supermicro X9DRT-HF+ Super Micro Computer Supermicro X9DRT-H6IBQF Super Micro Computer Supermicro X9DRT-H6IBFF Super Micro Computer Supermicro X9DRT-H6F Super Micro Computer Supermicro X9DRT-F Super Micro Computer Supermicro X9DRL-iF Super Micro Computer Supermicro X9DRL-EF Super Micro Computer Supermicro X9DRL-3F Super Micro Computer Supermicro X9DRi-LN4F+ Super Micro Computer Supermicro X9DRi-F Super Micro Computer Supermicro X9DRH-iTF Super Micro Computer Supermicro X9DRH-iF Super Micro Computer Supermicro X9DRH-7TF Super Micro Computer Supermicro X9DRH-7F Super Micro Computer Supermicro X9DRG-HTF+ Super Micro Computer Supermicro X9DRG-HTF Super Micro Computer Supermicro X9DRG-HF+ Super Micro Computer Supermicro X9DRG-HF Super Micro Computer Supermicro X9DRFR Super Micro Computer Supermicro X9DRFF-iTG+ Super Micro Computer Supermicro X9DRFF-iT+ Super Micro Computer Supermicro X9DRFF-iG+ Super Micro Computer Supermicro X9DRFF-i+ Super Micro Computer Supermicro X9DRFF-7TG+ Super Micro Computer Supermicro X9DRFF-7T+ Super Micro Computer Supermicro X9DRFF-7G+ Super Micro Computer Supermicro X9DRFF-7+ Super Micro Computer Supermicro X9DRFF-7 Super Micro Computer Supermicro X9DRFF Super Micro Computer Supermicro X9DRE-TF+ Super Micro Computer Supermicro X9DRE-LN4F Super Micro Computer Supermicro X9DRD-iF Super Micro Computer Supermicro X9DRD-EF Super Micro Computer Supermicro X9DRD-7LN4F-JBOD Super Micro Computer Supermicro X9DRD-7LN4F Super Micro Computer Supermicro X9DRD-7JLN4F Super Micro Computer Supermicro X9DR7-TF+ Super Micro Computer Supermicro X9DR7-LN4F-JBOD Super Micro Computer Supermicro X9DR7-LN4F Super Micro Computer Supermicro X9DR3-LN4F+ Super Micro Computer Supermicro X9DR3-F Super Micro Computer Supermicro X9DBU-iF Super Micro Computer Supermicro X9DBU-3F Super Micro Computer Supermicro X9DBL-iF Super Micro Computer Supermicro X9DBL-3F Super Micro Computer Supermicro X9DBi-TPF Super Micro Computer Supermicro X9DBi-F Super Micro Computer Supermicro X9DB3-TPF Super Micro Computer Supermicro X9DB3-F Super Micro Computer Supermicro X9DAX-iTF Super Micro Computer Supermicro X9DAX-iF-HFT Super Micro Computer Supermicro X9DAX-iF Super Micro Computer Supermicro X9DAX-7TF Super Micro Computer Supermicro X9DAX-7F-HFT Super Micro Computer Supermicro X9DAX-7F Super Micro Computer Supermicro X8SIU-F Super Micro Computer Supermicro X8SIT-HF Super Micro Computer Supermicro X8SIT-F Super Micro Computer Supermicro X8SIL-F Super Micro Computer Supermicro X8SIE-LN4F Super Micro Computer Supermicro X8SIE-F Super Micro Computer Supermicro X8SIA-F Super Micro Computer Supermicro X8SI6-F Super Micro Computer Supermicro X8DTU-LN4F+-LR Super Micro Computer Supermicro X8DTU-LN4F+ Super Micro Computer Supermicro X8DTU-6TF+-LR Super Micro Computer Supermicro X8DTU-6TF+ Super Micro Computer Supermicro X8DTU-6F+-LR Super Micro Computer Supermicro X8DTU-6F+ Super Micro Computer Supermicro X8DTN+-F-LR Super Micro Computer Supermicro X8DTN+-F Super Micro Computer Supermicro X8DTL-IF Super Micro Computer Supermicro X8DTL-6F Super Micro Computer Supermicro X8DTL-3F Super Micro Computer Supermicro X7SPT-DF-D525+ Super Micro Computer Supermicro X7SPT-DF-D525 Super Micro Computer Supermicro X7SPE-HF-D525 Super Micro Computer Supermicro X7SPE-HF Super Micro Computer Supermicro X7SPE-H-D525 Super Micro Computer Supermicro X7SPA-HF-D525 Super Micro Computer Supermicro X7SPA-HF Super Micro Computer Supermicro H8SML-iF Super Micro Computer Supermicro H8SML-i Super Micro Computer Supermicro H8SML-7F Super Micro Computer Supermicro H8SML-7 Super Micro Computer Supermicro H8SME-F Super Micro Computer Supermicro H8SGL-F Super Micro Computer Supermicro H8SCM-F Super Micro Computer Supermicro H8DGU-LN4F+ Super Micro Computer Supermicro H8DGU-F Super Micro Computer Supermicro H8DGT-HLIBQF Super Micro Computer Supermicro H8DGT-HLF Super Micro Computer Supermicro H8DGT-HIBQF Super Micro Computer Supermicro H8DGT-HF Super Micro Computer Supermicro H8DGi-F Super Micro Computer Supermicro H8DGG-QF Super Micro Computer Supermicro H8DG6-F Super Micro Computer Supermicro H8DCT-IBQF Super Micro Computer Supermicro H8DCT-HLN4F Super Micro Computer Supermicro H8DCT-HIBQF Super Micro Computer Supermicro H8DCT-F Super Micro Computer Supermicro H8DCL-iF Super Micro Computer Supermicro H8DCL-6F Citrix NetScaler T1 0 Citrix NetScaler Service Delivery Appliance 0 Citrix NetScaler Gateway 0 Citrix NetScaler Application Delivery Controller (ADC) 0 Citrix Command Center Appliance 0 Citrix CloudBridge 0 |
| Not Vulnerable: | |
Discussion
Supermicro IPMI Web Interface Multiple Stack-Based Buffer Overflow Vulnerabilities
Supermicro IPMI is prone to multiple stack-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data.
An attacker can exploit these issues to execute arbitrary code in the context of the device that uses the affected interface. Failed exploit attempts will likely crash the device.
Supermicro IPMI is prone to multiple stack-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data.
An attacker can exploit these issues to execute arbitrary code in the context of the device that uses the affected interface. Failed exploit attempts will likely crash the device.
Exploit / POC
Supermicro IPMI Web Interface Multiple Stack-Based Buffer Overflow Vulnerabilities
The researcher has created a proof-of-concept to demonstrate these issues. Please see the references for more information.
The researcher has created a proof-of-concept to demonstrate these issues. Please see the references for more information.
Solution / Fix
Supermicro IPMI Web Interface Multiple Stack-Based Buffer Overflow Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Supermicro IPMI Web Interface Multiple Stack-Based Buffer Overflow Vulnerabilities
References:
References: