Riskcovery

CVE-2018-11053

iSM: Dell EMC iDRAC Service Module Improper File Permission Vulnerability

State
Published
Severity
6.6 Medium
Published
Jun 26, 2018
Updated
Sep 16, 2024
Reserved
May 14, 2018

Read the record on cve.org

Description

Dell EMC iDRAC Service Module for all supported Linux and XenServer versions v3.0.1, v3.0.2, v3.1.0, v3.2.0, when started, changes the default file permission of the hosts file of the host operating system (/etc/hosts) to world writable. A malicious low privileged operating system user or process could modify the host file and potentially redirect traffic from the intended destination to sites hosting malicious or unwanted content.

Scores

CVSSScoreVectorSource
3.06.6 MediumCVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:Hdell

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
iDRAC Service ModuleDell EMC
  • 3.0.1Affected
  • 3.0.2Affected
  • 3.1.0Affected
  • 3.2.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.