CVE-2016-0907

CVE-2016-0907 affects EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3, and 8.0.x before 8.0.0.1, plus IsilonSD Edge OneFS 8.0.x before 8.0.0.1. The issue is that SMB signing is not required within a DCERPC session over ncacn_np, enabling a man-in-the-middle attacker to spoof SMB clients by modify...

CVE-2016-0907

EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacnnp, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a...

The vulnerability of the Isilon operating system OneFS, which allows a hacker to execute arbitrary commands

The vulnerability of the web-based administration interface of the Isilon OneFS operating system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with superuser privileges remotely...

Authentication flaw

EMC Isilon OneFS 7.1 before 7.1.1.8, 7.2.0 before 7.2.0.4, and 7.2.1 before 7.2.1.1 allows remote authenticated administrators to bypass a SmartLock root-login restriction by creating a root account and establishing a login session...

CVE-2015-4545

EMC Isilon OneFS 7.1 before 7.1.1.8, 7.2.0 before 7.2.0.4, and 7.2.1 before 7.2.1.1 allows remote authenticated administrators to bypass a SmartLock root-login restriction by creating a root account and establishing a login session...

CVE-2015-4545

EMC Isilon OneFS 7.1 before 7.1.1.8, 7.2.0 before 7.2.0.4, and 7.2.1 before 7.2.1.1 allows remote authenticated administrators to bypass a SmartLock root-login restriction by creating a root account and establishing a login session...

CVE-2015-4545

CVE-2015-4545 affects EMC Isilon OneFS (7.1, 7.2) and allows remote authenticated administrators to bypass the SmartLock root-login restriction by creating a root account and establishing a login session. The issue is described consistently across sources (NVD/NIST and CNVD/CVE records) as an ele...

EMC Isilon OneFS Elevation of Privilege Vulnerability

The EMC Isilon OneFS Operating System is an intelligent file system that combines a file system, volume manager and data protection. An elevation of privilege vulnerability exists in EMC Isilon OneFS in SmartLock compatibility mode, which could be exploited by remote attackers to gain root...

EMC Isilon OneFS操作系统权限提升漏洞

No description provided by source...

EMC Isilon OneFS privilege elevation Vulnerability(CVE-2 0 1 5-6 8 4 8)-vulnerability warning-the black bar safety net

CVECAN ID: CVE-2 0 1 5-6 8 4 8 EMC Isilon OneFS Operating System is a collection of File System, Volume Manager and data protection in one smart file system. EMC Isilon OneFS in the realization on the presence of Privilege escalation vulnerabilities, if the RFC 2 3 0 7 on the cluster is enabled a...

Code injection

EMC Isilon OneFS 7.1.x before 7.1.1.5, 7.2.0.x before 7.2.0.3, and 7.2.1.x before 7.2.1.1, when the RFC 2307 feature is configured but SFU is not universally present, allows remote authenticated AD users to obtain root privileges via unspecified vectors...

CVE-2015-6848

EMC Isilon OneFS 7.1.x before 7.1.1.5, 7.2.0.x before 7.2.0.3, and 7.2.1.x before 7.2.1.1, when the RFC 2307 feature is configured but SFU is not universally present, allows remote authenticated AD users to obtain root privileges via unspecified vectors...

CVE-2015-6848

EMC Isilon OneFS 7.1.x before 7.1.1.5, 7.2.0.x before 7.2.0.3, and 7.2.1.x before 7.2.1.1, when the RFC 2307 feature is configured but SFU is not universally present, allows remote authenticated AD users to obtain root privileges via unspecified vectors...

CVE-2015-6848

EMC Isilon OneFS vulnerability (CVE-2015-6848) affects Isilon 7.1.x before 7.1.1.5, 7.2.0.x before 7.2.0.3, and 7.2.1.x before 7.2.1.1. When RFC 2307 is configured but SFU is not universally present, remote authenticated AD users can obtain root privileges via unspecified vectors. The underlying ...

EMC Isilon OneFS OS Elevation of Privilege Vulnerability

The EMC Isilon OneFS Operating System is an intelligent file system that combines a file system, volume manager and data protection. An elevation of privilege vulnerability exists in EMC Isilon OneFS Operating System versions 7.1.x prior to 7.1.1.5, 7.2.0.x prior to 7.2.0.3, and 7.2.1.x prior to...

EMC Isilon OneFS code execution

Command injection in web administration...

ESA-2015-112: EMC Isilon OneFS Command Injection Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-112: EMC Isilon OneFS Command Injection Vulnerability EMC Identifier: ESA-2015-112 CVE Identifier: CVE-2015-4525 Severity Rating: CVSS v2 Base Score: 9.0 AV:N/AC:L/Au:S/C:C/I:C/A:C Affected products: • EMC Isilon OneFS 7.2.0.0 - 7.2.0.1 • EMC...

CVE-2015-4525

The log-gather implementation in the web administration interface in EMC Isilon OneFS 6.5.x.x through 7.1.1.x before 7.1.1.5 and 7.2.0.x before 7.2.0.2 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors...

Design/Logic Flaw

The log-gather implementation in the web administration interface in EMC Isilon OneFS 6.5.x.x through 7.1.1.x before 7.1.1.5 and 7.2.0.x before 7.2.0.2 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors...

CVE-2015-4525

EMC Isilon OneFS log-gather web admin interface vulnerability (CVE-2015-4525) allows remote authenticated users to execute commands with root privileges due to improper input validation in the log collection path. Affected: OneFS 6.5.x.x–7.1.1.x (before 7.1.1.5) and 7.2.0.x (before 7.2.0.2). Impa...