Asset ID:	1-77-1019460.1
Update Date:	2011-02-25
Keywords:

---

Solution Type  Sun Alert Sure

Solution  1019460.1 :   Security Vulnerabilities in the Embedded Lights Out Manager (ELOM) on Sun Fire X2100 M2 and X2200 M2 May Allow Unauthorized Logins  


PreviouslyPublishedAs
239886

Bug Id
<SUNBUG: 6633175>, <SUNBUG: 6648082>

Product
Sun Fire X2100 M2 Server
Sun Fire X2200 M2 Server

Date of Resolved Release
28-Jan-2009

Security Vulnerabilities in the Embedded Lights Out Manager (ELOM) on Sun Fire X2100 M2 and X2200 M2 may allow Unauthorized Logins

1. Impact

Security vulnerabilities in the Embedded Lights Out Manager (ELOM) on Sun Fire X2100 M2 and X2200 M2 servers may allow remote unprivileged users to gain unauthorized login access with all privileges to the ELOM or execute arbitrary commands on the Service Processor (SP).

Sun acknowledges with thanks, Tomas Kopal for discovering and reporting one of the above two issues.

2. Contributing Factors

These issues can occur on the following platforms:

x86 Platform

• Sun Fire X2100/X2200 M2 Servers with SP/BMC firmware version 3.19 or earlier

Notes:

1. No other x64 systems are affected by these issues.
2. The SPARC platform is not affected by these issues.
   

To determine the firmware version of the Service Processor (SP), the ipmitool(1M) utility can be run as in the following example:

$ ipmitool -H <hostname> -U <username> mc info
Device ID              : 5
Device Revision        : 0
Firmware Revision      : 2.91
IPMI Version           : 2.0

or the following command can be used at the CLI (logged in to the SP):

/SP -> show /SP/AgentInfo
/SP/AgentInfo
...
Properties:
HWVersion = 0
FWVersion = 3.09

3. Symptoms

There are no predictable symptoms to indicate these issues have been exploited to gain unauthorized access to the ELOM interface.

4. Workaround

To work around these issues, administrators may restrict access to the Service Processor (SP) on the Sun Fire servers by either connecting to it only via serial port or by allowing access to it only from a private management network.

Additional information regarding management of the Sun Fire X2100/X2200 M2 Servers, ELOM, and ipmitool(1m) can be found in the "Embedded Lights Out Manager Administration Guide" at:


5. Resolution

These issues are addressed in the following releases:

x86 Platform

• Sun Fire X2100 M2 Server with firmware version 3.20 from the 1.7 "Tools and Drivers" CD (or later) ISO

The ISO image is available at:

• Sun Fire X2200 M2 Server with firmware version 3.20 from the 2.1 "Tools and Drivers" CD (or later)

The ISO image is available at:

For more information on Security Sun Alerts, see <Document: 1009886.1>.

This Sun Alert notification is being provided to you on an "AS IS" basis. This Sun Alert notification may contain information provided by third parties. The issues described in this Sun Alert notification may or may not impact your system(s). Sun makes no representations, warranties, or guarantees as to the information contained herein. ANY AND ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT, ARE HEREBY DISCLAIMED. BY ACCESSING THIS DOCUMENT YOU ACKNOWLEDGE THAT SUN SHALL IN NO EVENT BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES THAT ARISE OUT OF YOUR USE OR FAILURE TO USE THE INFORMATION CONTAINED HEREIN. This Sun Alert notification contains Sun proprietary and confidential information. It is being provided to you pursuant to the provisions of your agreement to purchase services from Sun, or, if you do not have such an agreement, the Sun.com Terms of Use. This Sun Alert notification may only be used for the purposes contemplated by these agreements. 

Copyright 2000-2009 Sun Microsystems, Inc., 4150 Network Circle, Santa Clara, CA 95054 U.S.A. All rights reserved.

Internal Comments
Please send technical questions to the following email:
sunalert-tech-questions@sun.com
and CC the following persons:
Internal Contributor/Submitter
Internal Eng Responsible Engineer
Internal Services Knowledge Engineer

Internal Contributor/submitter
xiaoping.wu@sun.com

Internal Eng Responsible Engineer
xiaoping.wu@sun.com

Internal Services Knowledge Engineer
david.mariotto@sun.com

Internal Sun Alert & FAB Admin Info
18-Jul-2008, david m: draft created, send for review, hold for coordination of ISO images availability (Resolution)
22-Jan-2009, david m: ISO image released, signoff OK, tenative release 26-Jan per Paul
28-Jan-2009, send to publish


Attachments

This solution has no attachment