Security Advisory
CVE-2007-2387
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool.