| Package | Affected versions | Patched versions |
|---|---|---|
| emc isilon onefs | ≥ 8.0.0.0, ≤ 8.0.0.6≥ 8.0.1.0, ≤ 8.0.1.2≥ 8.1.0.0, ≤ 8.1.0.1 |
In Dell EMC Isilon OneFS, the compadmin is able to run tcpdump binary with root privileges. In versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, the tcpdump binary, being run with sudo, may potentially be used by compadmin to execute arbitrary code with root privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free