Apple today issued an update to its Xserve Lights-Out Management Firmware that offers functionality improvements alongside a security fix. A security vulnerability in Apple’s implementation of IPMI may allow an unprivileged ipmitool user to gain administrative privileges on an Xserve system. This update addresses the issue by requiring a password for remote usage of IPMI. This issue only affects Intel-based Xserve systems. Credit to James Wilson of LithiumCorp for reporting this issue.