PT-2017-2405 · Emc · Emc Isilon Onefs

Published 2017-01-23 · Updated 2017-01-24 · CVE-2016-9870

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC Isilon OneFS versions 7.1.0.x through 7.2.1.2 EMC Isilon OneFS version 8.0.0.0

Description The issue is caused by the failure to neutralize special elements in LDAP requests. This could allow a local attacker to gain unauthorized access to the system.

Recommendations For EMC Isilon OneFS versions 7.1.0.x through 7.2.1.2, consider restricting access to the LDAP functionality until a patch is available. For EMC Isilon OneFS version 8.0.0.0, consider restricting access to the LDAP functionality until a patch is available.

Fix

Weakness Enumeration

CWE-90

Related Identifiers

BDU:2017-01608

CVE-2016-9870

Affected Products

Emc Isilon Onefs

References · 5

• https://osv.dev/vulnerability/CVE-2016-9870 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01608 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-9870 · Security Note
• http://securityfocus.com/archive/1/540020/30/0/threaded · Note
• http://securityfocus.com/bid/95626 · Note