In Dell EMC Isilon OneFS, the compadmin is able to run tcpdump binary with root privileges. In versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, the tcpdump binary, being run with sudo, may potentially be used by compadmin to execute arbitrary code with root privileges.
References
| Link | Resource |
|---|---|
| http://seclists.org/fulldisclosure/2018/Mar/50 | Mailing List Third Party Advisory |
| http://www.securityfocus.com/bid/103033 | Third Party Advisory VDB Entry |
| https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities | Exploit Third Party Advisory |
| https://www.exploit-db.com/exploits/44039/ | Exploit Third Party Advisory VDB Entry |
| http://seclists.org/fulldisclosure/2018/Mar/50 | Mailing List Third Party Advisory |
| http://www.securityfocus.com/bid/103033 | Third Party Advisory VDB Entry |
| https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities | Exploit Third Party Advisory |
| https://www.exploit-db.com/exploits/44039/ | Exploit Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:59
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://seclists.org/fulldisclosure/2018/Mar/50 - Mailing List, Third Party Advisory | |
| References | () http://www.securityfocus.com/bid/103033 - Third Party Advisory, VDB Entry | |
| References | () https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities - Exploit, Third Party Advisory | |
| References | () https://www.exploit-db.com/exploits/44039/ - Exploit, Third Party Advisory, VDB Entry |
Information
Published : 2018-03-26 18:29
Updated : 2024-11-21 03:59
NVD link : CVE-2018-1203
Mitre link : CVE-2018-1203
CVE.ORG link : CVE-2018-1203
JSON object : View
Products Affected
dell
- emc_isilon_onefs
CWE
CWE-732
Incorrect Permission Assignment for Critical Resource