CVEvulnerability
CVE-2004-2600
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote attackers to obtain sensitive information when LAN management functionality is enabled.
Affected configurations
• intel cli auto-configuration utility
• intel client system setup utility
• intel server configuration wizard
• intel server control
• intel system setup utility
• intel carrier grade server tigpr2u
• intel carrier grade server tsrlt2
• intel carrier grade server tsrmt2
• hp carrier grade server cc2300 a6898a
• hp carrier grade server cc2300 a6899a
• hp carrier grade server cc3300 a6900a
• hp carrier grade server cc3300 a6901a
• hp carrier grade server cc3310 a9862a
• hp carrier grade server cc3310 a9863a
• intel entry server board se7210tp1-e
• intel entry server platform sr1325tp1-e
• intel server board scb2
• intel server board sds2
• intel server board se7500wv2
• intel server board se7501hg2
• intel server board shg2
• intel server platform spsh4
• intel server platform sr870bh2
• intel server platform sr870bn4
• intel server platform srsh4
References
- ftp://download.intel.com/support/motherboards/server/sb/aa6791invalidlanconfiguration040504.pdf Vendor Advisory
- http://secunia.com/advisories/11315 Patch, Vendor Advisory
- http://support.intel.com/support/motherboards/server/sb/CS-010422.htm support.intel.com
- http://www.osvdb.org/4978 www.osvdb.org
- http://www.securityfocus.com/bid/10068 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15775 exchange.xforce.ibmcloud.com
- ftp://download.intel.com/support/motherboards/server/sb/aa6791invalidlanconfiguration040504.pdf Vendor Advisory
- http://secunia.com/advisories/11315 Patch, Vendor Advisory
- http://support.intel.com/support/motherboards/server/sb/CS-010422.htm support.intel.com
- http://www.osvdb.org/4978 www.osvdb.org
- http://www.securityfocus.com/bid/10068 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15775 exchange.xforce.ibmcloud.com