Nixpkgs security tracker

Untriaged

Permalink CVE-2013-3619

created 2 months ago Activity log

Created suggestion 2 months ago

Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 …

Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for Supermicro X8 generation motherboards before SMT X8 312 contain harcoded private encryption keys for the (1) Lighttpd web server SSL interface and the (2) Dropbear SSH daemon.

References

https://support.citrix.com/article/CTX216642 x_transferredx_refsource_CONFIRM
http://support.citrix.com/article/CTX216642 x_transferredx_refsource_CONFIRM
https://community.rapid7.com/community/metasploit/blog/2013/11/05/supermicro-ip… x_transferredx_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/89044 x_transferredx_refsource_MISC
https://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf x_transferredx_refsource_CONFIRM

Affected products

IPMI

==before SMT_X9_317 and before SMT X8 312

Matching in nixpkgs

pkgs.ipmicfg

Supermicro IPMI configuration tool

nixos-unstable 1.34.0
- nixpkgs-unstable 1.34.0
- nixos-unstable-small 1.34.0
nixos-25.11 1.34.0
- nixos-25.11-small 1.34.0
- nixpkgs-25.11-darwin 1.34.0

pkgs.ripmime

Attachment extractor for MIME messages

nixos-unstable 1.4.0.10
- nixpkgs-unstable 1.4.0.10
- nixos-unstable-small 1.4.0.10
nixos-25.11 1.4.0.10
- nixos-25.11-small 1.4.0.10
- nixpkgs-25.11-darwin 1.4.0.10

pkgs.freeipmi

Implementation of the Intelligent Platform Management Interface

nixos-unstable 1.6.16
- nixpkgs-unstable 1.6.16
- nixos-unstable-small 1.6.16
nixos-25.11 1.6.16
- nixos-25.11-small 1.6.16
- nixpkgs-25.11-darwin 1.6.16

pkgs.ipmitool

Command-line interface to IPMI-enabled devices

nixos-unstable 1.8.19-unstable-2025-02-18
- nixpkgs-unstable 1.8.19-unstable-2025-02-18
- nixos-unstable-small 1.8.19-unstable-2025-02-18
nixos-25.11 1.8.19-unstable-2025-02-18
- nixos-25.11-small 1.8.19-unstable-2025-02-18
- nixpkgs-25.11-darwin 1.8.19-unstable-2025-02-18

pkgs.ipmiutil

Easy-to-use IPMI server management utility

nixos-unstable 3.2.1
- nixpkgs-unstable 3.2.1
- nixos-unstable-small 3.2.1
nixos-25.11 3.2.1
- nixos-25.11-small 3.2.1
- nixpkgs-25.11-darwin 3.2.1

pkgs.ipmiview

None

nixos-unstable 2.21.0
- nixpkgs-unstable 2.21.0
- nixos-unstable-small 2.21.0
nixos-25.11 2.21.0
- nixos-25.11-small 2.21.0
- nixpkgs-25.11-darwin 2.21.0

pkgs.openipmi

User-level library that provides a higher-level abstraction of IPMI and generic services

nixos-unstable 2.0.37
- nixpkgs-unstable 2.0.37
- nixos-unstable-small 2.0.37
nixos-25.11 2.0.37
- nixos-25.11-small 2.0.37
- nixpkgs-25.11-darwin 2.0.37

pkgs.kzipmix.x86_64-linux

Tool that aggressively optimizes the sizes of Zip archives

nixos-unstable 20200115
- nixpkgs-unstable 20200115
- nixos-unstable-small 20200115
nixos-25.11 20200115
- nixos-25.11-small 20200115
- nixpkgs-25.11-darwin 20200115