<p dir="ltr">I won't buy Dell without the dedicated ilo port for that very reason.</p>
<div class="gmail_quote">On Jun 26, 2014 7:18 PM, "Alex Carver" <<a href="mailto:agcarver%2Bale@acarver.net">agcarver+ale@acarver.net</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Depends on the implementation. I've got a Dell sitting next to me with<br>
its IPMI interface spliced directly to the on-board NIC (no USB bridges<br>
or anything else). If you plug their NIC into the wall then you've also<br>
done the same to the IPMI. The only workaround is to install another<br>
NIC and use that for the main connection.<br>
<br>
On 2014-06-26 08:37, Beddingfield, Allen wrote:<br>
> I saw this a few days ago and looked into it - it is related to IPMI. In my opinion, these management/IPMI interfaces should always be on an internal network that requires VPN access for remote connectivity.<br>
> Allen B.<br>
> --<br>
> Allen Beddingfield<br>
> Systems Engineer<br>
> The University of Alabama<br>
><br>
> ________________________________________<br>
> From: <a href="mailto:ale-bounces@ale.org">ale-bounces@ale.org</a> [<a href="mailto:ale-bounces@ale.org">ale-bounces@ale.org</a>] on behalf of James Taylor [<a href="mailto:James.Taylor@eastcobbgroup.com">James.Taylor@eastcobbgroup.com</a>]<br>
> Sent: Thursday, June 26, 2014 10:06 AM<br>
> To: Atlanta Linux Enthusiasts<br>
> Subject: [ale] Anyone using Supermicro motherboards?<br>
><br>
>>From the latest SANS Bulletin...<br>
> -jt<br>
><br>
> ID: N/A<br>
> Title: Supermicro Server Motherboard Credential Disclosure Vulnerability<br>
> Vendor: Supermicro<br>
> Description: Supermicro motherboards store administrator passwords in<br>
> plain text, which is available to any attacker who can connect to TCP<br>
> port 49152.<br>
> CVSS v2 Base Score: 10.0 (AV:N/AC:L/AU:N/C:C/I:C/A:C)<br>
><br>
_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
</blockquote></div>