5 ms·

If you're able to get access to the management network then you've basically already won - IPMI implementations just aren't good enough in general to resist any

by mjg59 10y ago

If you're able to get access to the management network then you've basically already won - IPMI implementations just aren't good enough in general to resist any kind of determined attack. But to answer your question, conforming implementations shouldn't let you read the password back over the local interface. Whether that's true in reality, well…

buildbot 10y ago
Hmm so with ipmitool you can test passwords for every registered IPMI user - so that's scriptable. (How fast can you test? who knows) Then, you can get the IPMI network VLAN from ipmitool as well, if your hosting provider was lazy and didn't use the dedicated port. After that, configure your box to be on that VLAN and then you're in???
- hueving 10y ago
  Is it possible to access ipmi interface via the normal nic? If so, I would hope they ensure access to that vlan is removed from the switch port as part of the handover process to the tenant.
  - buildbot 10y ago
    Testing this theory yes, you can, and yes, my provider at least does.