CVE-2008-4722

Unspecified vulnerability in Sun Integrated Lights-Out Manager (ILOM) 2.0.1.5 through 2.0.4.26 allows remote authenticated users to (1) access the service processor (SP) and cause a denial of service (shutdown or reboot), or (2) access the host operating system and have an unspecified impact, via unknown vectors.

Score

CVSS 2.0 9.0 Critical

Status

Modified - cve@mitre.org

Published

2008-10-23

Last modified

2024-08-07

Weaknesses

CWE-287

Affected products

• Blade 6000 Modular System With Chassis (Sun)
• Blade 6048 Modular System With Chassis (Sun)
• Blade 8000 Modular System (Sun)
• Blade 8000p Modular System (Sun)
• Blade T6320 Server Module (Sun)
• Blade X6220 With Server Module Software (Sun)
• Blade X6250 With Server Module Software (Sun)
• Blade X6450 With Server Module Software (Sun)
• Blade X8400 (Sun)
• Blade X8420 (Sun)
• Blade X8440 (Sun)
• Blade X8450 (Sun)
• Fire X2250 Server (Sun)
• Fire X4100 Server (Sun)
• Fire X4100m2 Server (Sun)
• Fire X4140 Server (Sun)
• Fire X4150 Server (Sun)
• Fire X4200 Server (Sun)
• Fire X4200m2 Server (Sun)
• Fire X4240 Server (Sun)
• Fire X4250 Server (Sun)
• Fire X4440 Server (Sun)
• Fire X4450 Server (Sun)
• Fire X4500 Server (Sun)
• Fire X4540 Server (Sun)
• Fire X4600 Server (Sun)
• Fire X4600m2 Server (Sun)
• Integrated Lights-out Manager (Sun)
• Netra (Sun)
• Netra X4200m2 Server (Sun)
• Netra X4250 Server (Sun)
• Netra X4450 (Sun)
• Sparc Enterprise Server T5120 (Sun)
• Sparc Enterprise Server T5140 (Sun)
• Sparc Enterprise Server T5220 (Sun)
• Sparc Enterprise Server T5240 (Sun)
• Sparc Enterprise Server T5440 (Sun)

References

• http://secunia.com/advisories/32298
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-243486-1
• http://www.securityfocus.com/bid/31861
• http://www.securitytracker.com/id?1021094
• http://www.vupen.com/english/advisories/2008/2890
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46023