Collected research

Illuminating the Security Issues Surrounding Lights-Out Server Management

Illuminating the Security Issues Surrounding Lights-Out Server Management (Paper)

Anthony J. Bonkoski, Russ Bielawski and J. Alex Halderman · USENIX · 13 August 2013

Demonstrates an unauthenticated stack overflow in a management-controller login CGI that yields root on the BMC. Firmware reuse, weak randomization and missing hardening broaden the concern beyond the tested device. Exposure measurements estimate affected systems; the authors did not exploit the Internet hosts they counted.

Record

Document

Illuminating the Security Issues Surrounding Lights-Out Server Management (Paper)

Researcher

Anthony J. Bonkoski, Russ Bielawski and J. Alex Halderman

Published by

USENIX

Date

13 August 2013

Format

Whitepaper

Topic

Server

In the archive

• Collected in the 2013 research round

Related sources

• Illuminating the Security Issues with Lights-Out Server Management (Slides) Slides

Tags

• rce
• memory-corruption
• case-study

This page is the archive's own catalogue record. The research is the work of Anthony J. Bonkoski, Russ Bielawski and J. Alex Halderman, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 29 September 2026.