Supermicro IPMI 'logout.cgi' Remote Buffer Overflow Vulnerability

Bugtraq ID:	64259
Class:	Boundary Condition Error
CVE:	CVE-2013-3622
Remote:	Yes
Local:	No
Published:	Nov 06 2013 12:00AM
Updated:	Nov 06 2013 12:00AM
Credit:	HD Moore of Rapid7
Vulnerable:	Super Micro Computer Supermicro IPMI SMT_X9_226 Super Micro Computer Supermicro IPMI SMT_X9_224
Not Vulnerable:	Super Micro Computer Supermicro IPMI SMT_X9_315

Supermicro IPMI 'logout.cgi' Remote Buffer Overflow Vulnerability

Supermicro IPMI is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Attackers may be able to execute arbitrary code with root privileges in the context of the affected firmware. Failed exploit attempts will likely result in denial-of-service conditions.

Supermicro IPMI running firmware versions prior to SMT_X9_315 are vulnerable.

Supermicro IPMI 'logout.cgi' Remote Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Supermicro IPMI 'logout.cgi' Remote Buffer Overflow Vulnerability

Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.

Supermicro IPMI 'logout.cgi' Remote Buffer Overflow Vulnerability

References:

• Supermicro IPMI Firmware Homepage (Super Micro Computer)
  
• Supermicro IPMI Firmware Vulnerabilities (Rapid7)
  
• CTX216642 Multiple Security Vulnerabilities in Citrix NetScaler Platform IPMI Li (Citrix)