Unspecified vulnerability in Sun Integrated Lights-Out Manager (ILOM) 2.0.1.5 through 2.0.4.26 allows remote authenticated users to (1) access the service processor (SP) and cause a denial of service (shutdown or reboot), or (2) access the host operating system and have an unspecified impact, via unknown vectors.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.01385.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
n/a n/a affected
Version Status Constraints
n/a affected —

Configuration 1 [-]

AND
cpe:2.3:a:sun:integrated_lights-out_manager:*:*:*:*:*:*:*:*
OR cpe:2.3:h:sun:blade_6000_modular_system_with_chassis:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:blade_6048_modular_system_with_chassis:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:blade_8000_modular_system:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:blade_8000p_modular_system:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:blade_t6320_server_module:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:blade_x6220_with_server_module_software:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:blade_x6250_with_server_module_software:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:blade_x6450_with_server_module_software:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:blade_x8400:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:blade_x8420:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:blade_x8440:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:blade_x8450:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_x2250_server:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_x4100_server:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_x4100m2_server:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_x4140_server:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_x4150_server:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_x4200_server:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_x4200m2_server:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_x4240_server:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_x4250_server:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_x4440_server:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_x4450_server:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_x4500_server:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_x4540_server:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_x4600_server:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:fire_x4600m2_server:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:netra:*:7.1.6:*:*:*:*:*:*
cpe:2.3:h:sun:netra:*:7.1.6:*:*:*:*:*:*
cpe:2.3:h:sun:netra:*:7.1.4a:*:*:*:*:*:*
cpe:2.3:h:sun:netra_x4200m2_server:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:netra_x4250_server:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:netra_x4450:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:sparc_enterprise_server_t5120:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:sparc_enterprise_server_t5140:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:sparc_enterprise_server_t5220:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:sparc_enterprise_server_t5240:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:sparc_enterprise_server_t5440:*:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Sun Subscribe
Blade 6000 Modular System With Chassis Subscribe
Blade 6048 Modular System With Chassis Subscribe
Blade 8000 Modular System Subscribe
Blade 8000p Modular System Subscribe
Blade T6320 Server Module Subscribe
Blade X6220 With Server Module Software Subscribe
Blade X6250 With Server Module Software Subscribe
Blade X6450 With Server Module Software Subscribe
Blade X8400 Subscribe
Blade X8420 Subscribe
Blade X8440 Subscribe
Blade X8450 Subscribe
Fire X2250 Server Subscribe
Fire X4100 Server Subscribe
Fire X4100m2 Server Subscribe
Fire X4140 Server Subscribe
Fire X4150 Server Subscribe
Fire X4200 Server Subscribe
Fire X4200m2 Server Subscribe
Fire X4240 Server Subscribe
Fire X4250 Server Subscribe
Fire X4440 Server Subscribe
Fire X4450 Server Subscribe
Fire X4500 Server Subscribe
Fire X4540 Server Subscribe
Fire X4600 Server Subscribe
Fire X4600m2 Server Subscribe
Integrated Lights-out Manager Subscribe
Netra Subscribe
Netra X4200m2 Server Subscribe
Netra X4250 Server Subscribe
Netra X4450 Subscribe
Sparc Enterprise Server T5120 Subscribe
Sparc Enterprise Server T5140 Subscribe
Sparc Enterprise Server T5220 Subscribe
Sparc Enterprise Server T5240 Subscribe
Sparc Enterprise Server T5440 Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2008-4702 Unspecified vulnerability in Sun Integrated Lights-Out Manager (ILOM) 2.0.1.5 through 2.0.4.26 allows remote authenticated users to (1) access the service processor (SP) and cause a denial of service (shutdown or reboot), or (2) access the host operating system and have an unspecified impact, via unknown vectors.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://secunia.com/advisories/32298 cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-26-243486-1 cve-icon cve-icon
http://www.securityfocus.com/bid/31861 cve-icon cve-icon
http://www.securitytracker.com/id?1021094 cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/2890 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/46023 cve-icon cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-07T10:24:20.983Z

Reserved: 2008-10-23T00:00:00.000Z

Link: CVE-2008-4722

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2008-10-23T22:00:01.527

Modified: 2025-04-09T00:30:58.490

Link: CVE-2008-4722

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses