Re: [Full-disclosure] Supermicro IPMI documentation omission: presence of second admin account

2011-10-15 Thread Floris Bos / Maxnet
Hi, On 14.10.2011 07:12, Jan van Niekerk wrote: It seems that as user Anonymous there is not a lot to do on the CLP/2 interface.  You can, however, access serial over lan as anonymous using IPMI: - depending on your firmware version you can get a busybox shell in the CLP/2 interface by

Re: [Full-disclosure] Supermicro IPMI documentation omission: presence of second admin account

2011-10-14 Thread Jan van Niekerk
It seems that as user Anonymous there is not a lot to do on the CLP/2 interface. You can, however, access serial over lan as anonymous using IPMI: ipmitool -I lanplus -H 192.168.0.1 -P admin -U sol activate Moral: consider the serial port to be untrusted on these devices. Supermicro? Are

[Full-disclosure] Supermicro IPMI documentation omission: presence of second admin account

2011-10-12 Thread Floris Bos
The IPMI functionality of some Supermicro mainboards comes with two admin accounts by default, which are labeled in the webinterface: ADMIN Anonymous The official documentation only tells you to change the password of the ADMIN account: == Note: The manufacturer default username and password