CVE-2013-3607 in H8dgu-f

Sumário (Inglês)

Multiple stack-based buffer overflows in the web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices allow remote attackers to execute arbitrary code on the Baseboard Management Controller (BMC), as demonstrated by the (1) username or (2) password field in login.cgi.

Once again VulDB remains the best source for vulnerability data.

Reservar

21/05/2013

Divulgação

07/09/2013

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
64871	Supermicro H8dgu-f Intelligent Platform Management login.cgi Excesso de tampão	119	Não definido	Não definido	CVE-2013-3607

Fontes

• MITRE
• NVD
• CVE Details