CVE-2008-4722

CVSS V2 High 9 CVSS V3 None
Description
Unspecified vulnerability in Sun Integrated Lights-Out Manager (ILOM) 2.0.1.5 through 2.0.4.26 allows remote authenticated users to (1) access the service processor (SP) and cause a denial of service (shutdown or reboot), or (2) access the host operating system and have an unspecified impact, via unknown vectors.
Overview
  • CVE ID
  • CVE-2008-4722
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2008-10-23T22:00:01
  • Last Modified Date
  • 2017-08-08T01:32:52
Weakness Enumerations
CWE URL
CWE-287 http://cwe.mitre.org/data/definitions/287.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:a:sun:integrated_lights-out_manager:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:sun:blade_6000_modular_system_with_chassis:*:*:*:*:*:*:*:* 1 OR 2.0
cpe:2.3:h:sun:blade_6048_modular_system_with_chassis:*:*:*:*:*:*:*:* 1 OR 2.0
cpe:2.3:h:sun:blade_8000_modular_system:*:*:*:*:*:*:*:* 1 OR 2.1.1
cpe:2.3:h:sun:blade_8000p_modular_system:*:*:*:*:*:*:*:* 1 OR 2.1.1
cpe:2.3:h:sun:blade_t6320_server_module:*:*:*:*:*:*:*:* 1 OR 7.1.6
cpe:2.3:h:sun:blade_x6220_with_server_module_software:*:*:*:*:*:*:*:* 1 OR 2.0
cpe:2.3:h:sun:blade_x6250_with_server_module_software:*:*:*:*:*:*:*:* 1 OR 2.0
cpe:2.3:h:sun:blade_x6450_with_server_module_software:*:*:*:*:*:*:*:* 1 OR 2.0
cpe:2.3:h:sun:blade_x8400:*:*:*:*:*:*:*:* 1 OR 2.0.2
cpe:2.3:h:sun:blade_x8420:*:*:*:*:*:*:*:* 1 OR 2.0.2
cpe:2.3:h:sun:blade_x8440:*:*:*:*:*:*:*:* 1 OR 2.0.2
cpe:2.3:h:sun:blade_x8450:*:*:*:*:*:*:*:* 1 OR 2.1
cpe:2.3:h:sun:fire_x2250_server:*:*:*:*:*:*:*:* 1 OR sw_1.1
cpe:2.3:h:sun:fire_x4100_server:*:*:*:*:*:*:*:* 1 OR sw_1.5.1
cpe:2.3:h:sun:fire_x4100m2_server:*:*:*:*:*:*:*:* 1 OR sw_2.1
cpe:2.3:h:sun:fire_x4140_server:*:*:*:*:*:*:*:* 1 OR sw_2.1
cpe:2.3:h:sun:fire_x4150_server:*:*:*:*:*:*:*:* 1 OR sw_2.0
cpe:2.3:h:sun:fire_x4200_server:*:*:*:*:*:*:*:* 1 OR sw_1.5.1
cpe:2.3:h:sun:fire_x4200m2_server:*:*:*:*:*:*:*:* 1 OR sw_2.1
cpe:2.3:h:sun:fire_x4240_server:*:*:*:*:*:*:*:* 1 OR sw_2.1
cpe:2.3:h:sun:fire_x4250_server:*:*:*:*:*:*:*:* 1 OR sw_1.1
cpe:2.3:h:sun:fire_x4440_server:*:*:*:*:*:*:*:* 1 OR sw_2.1
cpe:2.3:h:sun:fire_x4450_server:*:*:*:*:*:*:*:* 1 OR sw_2.1.0
cpe:2.3:h:sun:fire_x4500_server:*:*:*:*:*:*:*:* 1 OR sw_1.5
cpe:2.3:h:sun:fire_x4540_server:*:*:*:*:*:*:*:* 1 OR sw_1.0
cpe:2.3:h:sun:fire_x4600_server:*:*:*:*:*:*:*:* 1 OR sw_1.4
cpe:2.3:h:sun:fire_x4600m2_server:*:*:*:*:*:*:*:* 1 OR sw_2.1.2
cpe:2.3:h:sun:netra:*:7.1.6:*:*:*:*:*:* 1 OR cp3260_atca_blade_server
cpe:2.3:h:sun:netra:*:7.1.6:*:*:*:*:*:* 1 OR t5220_server
cpe:2.3:h:sun:netra:*:7.1.4a:*:*:*:*:*:* 1 OR t5440_server
cpe:2.3:h:sun:netra_x4200m2_server:*:*:*:*:*:*:*:* 1 OR sw_2.1
cpe:2.3:h:sun:netra_x4250_server:*:*:*:*:*:*:*:* 1 OR sw_1.1
cpe:2.3:h:sun:netra_x4450:*:*:*:*:*:*:*:* 1 OR sw_1.1
cpe:2.3:h:sun:sparc_enterprise_server_t5120:*:*:*:*:*:*:*:* 1 OR 7.1.6
cpe:2.3:h:sun:sparc_enterprise_server_t5140:*:*:*:*:*:*:*:* 1 OR 7.1.6
cpe:2.3:h:sun:sparc_enterprise_server_t5220:*:*:*:*:*:*:*:* 1 OR 7.1.6
cpe:2.3:h:sun:sparc_enterprise_server_t5240:*:*:*:*:*:*:*:* 1 OR 7.1.6
cpe:2.3:h:sun:sparc_enterprise_server_t5440:*:*:*:*:*:*:*:* 1 OR 7.1.5b
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:S/C:C/I:C/A:C
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • SINGLE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 9
  • Severity
  • HIGH
  • Exploitability Score
  • 8
  • Impact Score
  • 10
References
Reference URL Reference Tags
http://sunsolve.sun.com/search/document.do?assetkey=1-26-243486-1
http://secunia.com/advisories/32298 Vendor Advisory
http://www.securityfocus.com/bid/31861
http://www.securitytracker.com/id?1021094
http://www.vupen.com/english/advisories/2008/2890
https://exchange.xforce.ibmcloud.com/vulnerabilities/46023
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2008-4722
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4722
History
Created Old Value New Value Data Type Notes
2022-05-10 09:05:35 Added to TrackCVE