CVE-2015-0528

The RPC daemon in EMC Isilon OneFS 6.5.x and 7.0.x before 7.0.2.13, 7.1.0 before 7.1.0.6, 7.1.1 before 7.1.1.2, and 7.2.0 before 7.2.0.1 allows local users to gain privileges by leveraging an ability to modify system files.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://packetstormsecurity.com/files/131035/EMC-Isilon-OneFS-Privilege-Escalation.html	Third Party Advisory VDB Entry
http://seclists.org/bugtraq/2015/Mar/162	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:emc:isilon_onefs::::::::
	cpe:2.3:o:emc:isilon_onefs:7.1.0.0:::::::*
	cpe:2.3:o:emc:isilon_onefs:7.1.0.1:::::::*
	cpe:2.3:o:emc:isilon_onefs:7.1.0.2:::::::*
	cpe:2.3:o:emc:isilon_onefs:7.1.0.3:::::::*
	cpe:2.3:o:emc:isilon_onefs:7.1.0.4:::::::*
	cpe:2.3:o:emc:isilon_onefs:7.1.0.5:::::::*
	cpe:2.3:o:emc:isilon_onefs:7.1.1.0:::::::*
	cpe:2.3:o:emc:isilon_onefs:7.1.1.1:::::::*
	cpe:2.3:o:emc:isilon_onefs:7.2.0.0:::::::*

History

No history.

Information

Published : 2015-03-29 10:59

Updated : 2024-02-04 18:35

NVD link : CVE-2015-0528

Mitre link : CVE-2015-0528

CVE.ORG link : CVE-2015-0528

JSON object : View

Products Affected

emc

isilon_onefs

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2015-0528", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-03-29T10:59:04.243", "references": [{"url": "http://packetstormsecurity.com/files/131035/EMC-Isilon-OneFS-Privilege-Escalation.html", "tags": ["Third Party Advisory", "VDB Entry"], "source": "security_alert@emc.com"}, {"url": "http://seclists.org/bugtraq/2015/Mar/162", "tags": ["Third Party Advisory", "VDB Entry"], "source": "security_alert@emc.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "The RPC daemon in EMC Isilon OneFS 6.5.x and 7.0.x before 7.0.2.13, 7.1.0 before 7.1.0.6, 7.1.1 before 7.1.1.2, and 7.2.0 before 7.2.0.1 allows local users to gain privileges by leveraging an ability to modify system files."}, {"lang": "es", "value": "El demonio RPC en EMC Isilon OneFS 6.5.x y 7.0.x anterior a 7.0.2.13, 7.1.0 anterior a 7.1.0.6, 7.1.1 anterior a 7.1.1.2, y 7.2.0 anterior a 7.2.0.1 permite a usuarios locales ganar privilegios mediante el aprovechamiento de una habilidad para modificar ficheros de"}], "lastModified": "2016-08-24T19:28:46.967", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:emc:isilon_onefs:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E3CBDEBE-5324-4146-BB97-ABFB38530A48", "versionEndIncluding": "7.0.2.12"}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2CD6F32C-BC12-455D-9C78-F6485C72582E"}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6521D899-186D-4200-96A2-C8137D6D8975"}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "542839DF-EF0F-4B14-B56D-FBC0FE4D2787"}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B78EA29B-CD7A-4C9D-9B0C-E6888BEC82C4"}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7A42792-B156-45D3-9A22-C45FFCF652DC"}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E706E435-8E45-4ACB-8BBC-5AC458378D4A"}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DEDB97FE-6470-4AFE-A3B0-B664F132A190"}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A669BE6B-726F-4F34-A009-798E32FF6895"}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0E8AF3E1-FE57-40B9-95DD-4E4C8EB578CB"}], "operator": "OR"}]}], "sourceIdentifier": "security_alert@emc.com"}