CVE-2009-1426

Unspecified vulnerability on HP ProLiant DL and ML 100 Series G5, G5p, and G6 servers with ProLiant Onboard Administrator Powered by LO100i (formerly Lights Out 100) 3.07 and earlier allows remote attackers to cause a denial of service via unknown vectors.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://marc.info/?l=bugtraq&m=124881779623139&w=2	Patch
http://secunia.com/advisories/35990
http://www.securitytracker.com/id?1022617

Configurations

Configuration 1 (hide)

AND

cpe:2.3:h:hp:proliant_onboard_administrator:3.07:*:powered_by_lo100i:*:*:*:*:*

OR	cpe:2.3:h:hp:proliant_dl120:-:g5::::::
	cpe:2.3:h:hp:proliant_dl160:-:g5::::::
	cpe:2.3:h:hp:proliant_dl160:-:g5p::::::
	cpe:2.3:h:hp:proliant_dl160:-:g6::::::
	cpe:2.3:h:hp:proliant_dl165:-:g6::::::
	cpe:2.3:h:hp:proliant_dl180:-:g5::::::
	cpe:2.3:h:hp:proliant_dl180:-:g6::::::
	cpe:2.3:h:hp:proliant_dl185:-:g5::::::
	cpe:2.3:h:hp:proliant_ml110:-:g5::::::
	cpe:2.3:h:hp:proliant_ml115:-:g5::::::
	cpe:2.3:h:hp:proliant_ml150:-:g5::::::

History

No history.

Information

Published : 2009-07-29 17:30

Updated : 2009-08-11 05:24

NVD link : CVE-2009-1426

Mitre link : CVE-2009-1426

CVE.ORG link : CVE-2009-1426

JSON object : View

Products Affected

hp

proliant_dl120
proliant_dl165
proliant_dl185
proliant_ml115
proliant_onboard_administrator
proliant_dl160
proliant_ml150
proliant_ml110
proliant_dl180

CWE

NVD-CWE-noinfo

{"id": "CVE-2009-1426", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": true, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-07-29T17:30:01.127", "references": [{"url": "http://marc.info/?l=bugtraq&m=124881779623139&w=2", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/35990", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1022617", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability on HP ProLiant DL and ML 100 Series G5, G5p, and G6 servers with ProLiant Onboard Administrator Powered by LO100i (formerly Lights Out 100) 3.07 and earlier allows remote attackers to cause a denial of service via unknown vectors."}, {"lang": "es", "value": "Vulnerabilidad sin especificar en los servidores HP ProLiant DL y ML 100 Series G5, G5p, y G6 con ProLiant Onboard Administrator Powered by LO100i (anteriormente Lights Out 100) v3.07 y anteriores, permite a atacantes remotos provocar una dengaci\u00f3n de servicio a trav\u00e9s de vectores desconocidos."}], "lastModified": "2009-08-11T05:24:54.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hp:proliant_onboard_administrator:3.07:*:powered_by_lo100i:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB9DCB4B-9F27-4CF7-93DC-B8BA90FFAC15"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hp:proliant_dl120:-:g5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BE68D2A4-985B-4675-BEEC-F3FB0C76BD4E"}, {"criteria": "cpe:2.3:h:hp:proliant_dl160:-:g5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D29094A9-B14A-475C-A0E9-DA92414AE4AE"}, {"criteria": "cpe:2.3:h:hp:proliant_dl160:-:g5p:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69F58087-C9AB-4E1A-A0F7-ADD2BBBB6716"}, {"criteria": "cpe:2.3:h:hp:proliant_dl160:-:g6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8FC09958-856F-4750-A94F-E387B1DA4FF8"}, {"criteria": "cpe:2.3:h:hp:proliant_dl165:-:g6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EEAC03FE-EEF4-43FE-9791-B9FE6FDFE870"}, {"criteria": "cpe:2.3:h:hp:proliant_dl180:-:g5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5BD7B7F-1C8D-41E2-9F63-654050A595D7"}, {"criteria": "cpe:2.3:h:hp:proliant_dl180:-:g6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D02277DA-1B2F-4ED5-BD04-642B5020FABF"}, {"criteria": "cpe:2.3:h:hp:proliant_dl185:-:g5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "359D0748-F951-4AD5-88D7-609B7C028275"}, {"criteria": "cpe:2.3:h:hp:proliant_ml110:-:g5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A453C79-1AEB-48B9-8097-B5FC10E443F4"}, {"criteria": "cpe:2.3:h:hp:proliant_ml115:-:g5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A493D9B8-EAC2-4C31-BE90-E10087044F79"}, {"criteria": "cpe:2.3:h:hp:proliant_ml150:-:g5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B44642B-B3F1-42BE-996B-1149D93DBAC3"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}