A vulnerability has been reported in Integrated Lights Out Manager, which can be exploited by malicious, local users to gain escalated privileges.

The vulnerability is caused due to an unspecified error. No more information is currently available.

The vulnerability is reported in firmware versions 8.1.4.e and prior as well as 8.2.0 for SPARC T4-1, SPARC T4-1B, SPARC T4-2, SPARC T4-4, Netra SPARC T4-1, Netra SPARC T4-1B, Netra SPARC T4-2, SPARC T3-1, SPARC T3-1B, SPARC T3-2, SPARC T3-4, Netra SPARC T3-1, and Netra SPARC T3-1B.

Solution
Apply updates (please see the vendor's advisory for details).
Further details available to Secunia VIM customers

Provided and/or discovered by
It is currently unclear who reported the vulnerability as the Oracle Critical Patch Update for July 2012 only provides a bundled list of credits. This section will be updated when/if the original reporters provide more information.

Original Advisory
Oracle:
http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html#AppendixSUNS
http://www.oracle.com/technetwork/topics/security/cpujul2012verbose-392736.html#Oracle%20Sun%20Products%20Suite

Deep Links
Links available to Secunia VIM customers