CVE-2009-0171: Critical severity Sun Sparc Enterprise Server vulnerability
The Sun SPARC Enterprise M4000 and M5000 Server, within a certain range of serial numbers, allows remote attackers to use the manufacturing root password, perform a root login to the eXtended System Control Facility Unit (aka XSCFU or Service Processor), and have unspecified other impact.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0171?
CVE-2009-0171 is considered a critical vulnerability due to the potential for remote attackers to gain root access.
How do I fix CVE-2009-0171?
To remediate CVE-2009-0171, ensure that the manufacturing root password is changed immediately and access is restricted.
What are the affected devices for CVE-2009-0171?
CVE-2009-0171 affects the Sun SPARC Enterprise M4000 and M5000 servers within a specific range of serial numbers.
What impact does CVE-2009-0171 have on affected systems?
CVE-2009-0171 allows remote attackers to perform a root login and possibly execute unauthorized commands on affected servers.
Is there a patch available for CVE-2009-0171?
There is no specific patch for CVE-2009-0171; mitigation involves changing the root password and tightening access controls.