Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.1

Sun Integrated Lights Out Manager lets local users view data

CVE-2011-2263 · published 15 years ago
Summary

The Sun Integrated Lights Out Manager component in Oracle SysFW version 8.0.3.b or earlier on Oracle SPARC T3, Netra T3, Sun Blade and Sun Fire servers can allow anyone with local access to read confidential information. This could expose sensitive system details to unauthorized personnel. Apply the latest Oracle SysFW update or firmware patch that removes this behavior.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
oracle sysfw 7.2
7.3
7.4
8.0
<= 8.0.3
6.0
6.1
6.2
6.3
6.4
6.5
6.6
3 more version ranges
cpe:2.3:a:oracle:sysfw:7.2:*:*:*:*:*:*:*
oracle netra_sparc_t3-1 All versions
cpe:2.3:h:oracle:netra_sparc_t3-1:-:*:*:*:*:*:*:*
oracle sparc_t3-1 All versions
cpe:2.3:h:oracle:sparc_t3-1:-:*:*:*:*:*:*:*
oracle sparc_t3-1b All versions
cpe:2.3:h:oracle:sparc_t3-1b:-:*:*:*:*:*:*:*
oracle sparc_t3-3 All versions
cpe:2.3:h:oracle:sparc_t3-3:-:*:*:*:*:*:*:*
oracle sparc_t3-4 All versions
cpe:2.3:h:oracle:sparc_t3-4:-:*:*:*:*:*:*:*
oracle sun_blade_x6250 All versions
cpe:2.3:h:oracle:sun_blade_x6250:-:*:*:*:*:*:*:*
oracle sun_blade_x6270 All versions
cpe:2.3:h:oracle:sun_blade_x6270:-:*:*:*:*:*:*:*
oracle sun_blade_x6270_m2 All versions
cpe:2.3:h:oracle:sun_blade_x6270_m2:-:*:*:*:*:*:*:*
oracle sun_blade_x6275 All versions
cpe:2.3:h:oracle:sun_blade_x6275:-:*:*:*:*:*:*:*
oracle sun_blade_x6275_m2 All versions
cpe:2.3:h:oracle:sun_blade_x6275_m2:-:*:*:*:*:*:*:*
oracle sun_blade_x6440_m2 All versions
cpe:2.3:h:oracle:sun_blade_x6440_m2:-:*:*:*:*:*:*:*
oracle sun_blade_x6450 All versions
cpe:2.3:h:oracle:sun_blade_x6450:-:*:*:*:*:*:*:*
oracle sun_fire_x2270 All versions
cpe:2.3:h:oracle:sun_fire_x2270:-:*:*:*:*:*:*:*
oracle sun_fire_x2270_m2 All versions
cpe:2.3:h:oracle:sun_fire_x2270_m2:-:*:*:*:*:*:*:*
oracle sun_fire_x4170 All versions
cpe:2.3:h:oracle:sun_fire_x4170:-:*:*:*:*:*:*:*
oracle sun_fire_x4170_m2 All versions
cpe:2.3:h:oracle:sun_fire_x4170_m2:-:*:*:*:*:*:*:*
oracle sun_fire_x4270 All versions
cpe:2.3:h:oracle:sun_fire_x4270:-:*:*:*:*:*:*:*
oracle sun_fire_x4270_m2 All versions
cpe:2.3:h:oracle:sun_fire_x4270_m2:-:*:*:*:*:*:*:*
oracle sun_fire_x4275 All versions
cpe:2.3:h:oracle:sun_fire_x4275:-:*:*:*:*:*:*:*
oracle sun_fire_x4470 All versions
cpe:2.3:h:oracle:sun_fire_x4470:-:*:*:*:*:*:*:*
oracle sun_fire_x4470_m2 All versions
cpe:2.3:h:oracle:sun_fire_x4470_m2:-:*:*:*:*:*:*:*
oracle sun_fire_x4540 All versions
cpe:2.3:h:oracle:sun_fire_x4540:-:*:*:*:*:*:*:*
Original advisory text
Unspecified vulnerability in Sun Integrated Lights Out Manager in Oracle SysFW 8.0.3.b or earlier for various Oracle SPARC T3, SPARC Netra T3, Sun Blade, and Sun Fire servers allows local users to ...
Unspecified vulnerability in Sun Integrated Lights Out Manager in Oracle SysFW 8.0.3.b or earlier for various Oracle SPARC T3, SPARC Netra T3, Sun Blade, and Sun Fire servers allows local users to affect confidentiality via unknown vectors.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
2.1 Low
Exploitation
<1% chance of attack within 30 days
Timeline
Published20 Jul 2011
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2011-2263 · NVD
Track software like this
Free during beta