VULNERABILITY INTELLIGENCE

CVE-2018-11053

CVSS score6.5 MEDIUM

EPSS probability0.45%

CISA KEVNot currently listed

Published2018-06-26

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

Dell EMC iDRAC Service Module for all supported Linux and XenServer versions v3.0.1, v3.0.2, v3.1.0, v3.2.0, when started, changes the default file permission of the hosts file of the host operating system (/etc/hosts) to world writable. A malicious low privileged operating system user or process could modify the host file and potentially redirect traffic from the intended destination to sites hosting malicious or unwanted content.

Weakness classification

CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references

security_alert@emc.com — Patch, Vendor Advisory
security_alert@emc.com — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry