A vulnerability has been reported in Sun Integrated Lights-Out Manager, which can be exploited by malicious users to bypass certain security restrictions.

The vulnerability is caused due to an unspecified error in the included web interface. This can be exploited to gain unauthorized access to the service processor (SP) or to the host system.

Solution
Update to a fixed firmware version. Please see vendor's advisory for more information.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-243486-1

Deep Links
Links available in Customer Area