CVE-2018-1204

State: Published
Severity: Not scored
Published: Mar 26, 2018
Updated: Sep 16, 2024
Reserved: Dec 6, 2017

Description

Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a path traversal vulnerability in the isi_phone_home tool. A malicious compadmin may potentially exploit this vulnerability to execute arbitrary code with root privileges.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Isilon OneFSDell EMC	versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, 8.0.0.0 - 8.0.0.6, versions 7.2.1.x and version 7.1.1.11Affected

References

103033vdb-entry
20180319 DSA-2018-018: Dell EMC Isilon OneFS Multiple Vulnerabilitiesmailing-list
https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities
44039exploit

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.