CVE-2004-2600

The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote attackers to obtain sensitive information when LAN management functionality is enabled.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2004-12-31

Last modified

2024-08-08

Affected products

• Carrier Grade Server Cc2300 (Hp)
• Carrier Grade Server Cc3300 (Hp)
• Carrier Grade Server Cc3310 (Hp)
• Carrier Grade Server Tigpr2u (Intel)
• Carrier Grade Server Tsrlt2 (Intel)
• Carrier Grade Server Tsrmt2 (Intel)
• Cli Auto-configuration Utility (Intel)
• Client System Setup Utility (Intel)
• Entry Server Board Se7210tp1-e (Intel)
• Entry Server Platform Sr1325tp1-e (Intel)
• Server Board Scb2 (Intel)
• Server Board Sds2 (Intel)
• Server Board Se7500wv2 (Intel)
• Server Board Se7501hg2 (Intel)
• Server Board Shg2 (Intel)
• Server Configuration Wizard (Intel)
• Server Control (Intel)
• Server Platform Spsh4 (Intel)
• Server Platform Sr870bh2 (Intel)
• Server Platform Sr870bn4 (Intel)
• Server Platform Srsh4 (Intel)
• System Setup Utility (Intel)

References

• http://secunia.com/advisories/11315
• http://support.intel.com/support/motherboards/server/sb/CS-010422.htm
• http://www.osvdb.org/4978
• http://www.securityfocus.com/bid/10068
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15775