Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2013-4786

Description

The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.

POC

Reference

- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

- https://nvidia.custhelp.com/app/answers/detail/a_id/5010

Github

- https://github.com/ARPSyndicate/cve-scores

- https://github.com/AlienTec1908/Atom_HackMyVM_Easy

- https://github.com/CVEDB/awesome-cve-repo

- https://github.com/Onder7994/ipmi-honeypot

- https://github.com/fin3ss3g0d/CosmicRakp

- https://github.com/tallperennial/CosmicRakp

- https://github.com/theguly/stars