CVE-2007-0661

MediumCVSS 5.4/10Last modified Jun 16, 2026

Description

Intel Enterprise Southbridge 2 Baseboard Management Controller (BMC), Intel Server Boards 5000XAL, S5000PAL, S5000PSL, S5000XVN, S5000VCL, S5000VSA, SC5400RA, and OEM Firmware for Intel Enterprise Southbridge Baseboard Management Controller before 20070119, when Intelligent Platform Management Interface (IPMI) is enabled, allow remote attackers to connect and issue arbitrary IPMI commands, possibly triggering a denial of service.

Metrics

CVSS 2.0 5.4/10AV:A/AC:M/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lz1.intel.com/psirt/advisory.aspx?intelid=INTEL-SA-00012&languageid=en-frPatch, Vendor Advisory
http://osvdb.org/33044
http://secunia.com/advisories/23989Vendor Advisory
http://www.securityfocus.com/bid/22341
http://www.vupen.com/english/advisories/2007/0432
http://lz1.intel.com/psirt/advisory.aspx?intelid=INTEL-SA-00012&languageid=en-frPatch, Vendor Advisory
http://osvdb.org/33044
http://secunia.com/advisories/23989Vendor Advisory
http://www.securityfocus.com/bid/22341
http://www.vupen.com/english/advisories/2007/0432

Timeline

Published: Feb 1, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-06627.5PHP remote file inclusion vulnerability in includes/usercp_viewprofile.php in Hailboards 1.2.0 allows remote attackers to execute arbitrary CVE-2007-06637.5SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL c CVE-2007-06645.0thttpd before 2.25b-r6 in Gentoo Linux is started from the system root directory (/) by the Gentoo baselayout 1.12.6 package, which allows r CVE-2007-06656.8Format string vulnerability in the SCP module in Ipswitch WS_FTP 2007 Professional might allow remote attackers to execute arbitrary command CVE-2007-06666.8Ipswitch WS_FTP Server 5.04 allows FTP site administrators to execute arbitrary code on the system via a long input string to the (1) iFTPAd CVE-2007-06676.5The redirect function in Form.pm for (1) LedgerSMB before 1.1.5 and (2) SQL-Ledger allows remote authenticated users to execute arbitrary co CVE-2007-06686.2The Loopback Filesystem (LOFS) in Sun Solaris 10 allows local users in a non-global zone to move and rename files in a read-only filesystem,CVE-2007-06694.6Unspecified vulnerability in Twiki 4.0.0 through 4.1.0 allows local users to execute arbitrary Perl code via unknown vectors related to CGI CVE-2007-06704.6Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including CVE-2007-06718.8Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assist CVE-2007-06727.8LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and daemon hang) via a v CVE-2007-06737.8LGSERVER.EXE in BrightStor ARCserve Backup for Laptops & Desktops r11.1 allows remote attackers to cause a denial of service (daemon crash)