CyberSec.Space Logo
Back to CVE Browser

CVE-2007-2387

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0260%
EPSS Percentile43.40th
PublishedJun 4, 2007
Last ModifiedApr 23, 2026

Vulnerability Description

Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool.

Affected Platforms (CPE)

📦
Apple

Xserve Lights Out Management

= firmware_0

References & Advisories

🔗 http://docs.info.apple.com/article.html?artnum=305571
🔗 http://lists.apple.com/archives/security-announce/2007/May/msg00006.html
🔗 http://osvdb.org/36128
🔗 http://secunia.com/advisories/25499
🔗 http://www.apple.com/support/downloads/xservelightsoutmanagementfirmwareupdate10.html
🔗 http://www.securityfocus.com/bid/24257
🔗 http://www.securitytracker.com/id?1018181
🔗 http://www.vupen.com/english/advisories/2007/2014

Related Vulnerabilities

CVE-2007-049610.0

PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website (nlws) 3.2 and earlier allows remote attackers to ex...

CVE-2007-020310.0

Multiple unspecified vulnerabilities in phpMyAdmin before 2.9.2-rc1 have unknown impact and attack vectors.

CVE-2007-350010.0

Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie.

CVE-2007-020110.0

Buffer overflow in the cmd_usr function in ftp-gw in TIS Internet Firewall Toolkit (FWTK) allows remote attackers to execute arbit...