The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fujitsu_m10_firmware | Oracle | * | 2290 (including) |
| Freeipmi | Ubuntu | devel | * |
| Freeipmi | Ubuntu | lucid | * |
| Freeipmi | Ubuntu | precise | * |
| Freeipmi | Ubuntu | quantal | * |
| Freeipmi | Ubuntu | raring | * |
| Freeipmi | Ubuntu | saucy | * |
| Openipmi | Ubuntu | devel | * |
| Openipmi | Ubuntu | lucid | * |
| Openipmi | Ubuntu | precise | * |
| Openipmi | Ubuntu | quantal | * |
| Openipmi | Ubuntu | raring | * |
| Openipmi | Ubuntu | saucy | * |