CVE-2018-11053 iSM: Dell EMC iDRAC Service Module Improper File Permission Vulnerability
Dell iDRAC Service Module incorrectly sets /etc/hosts permissions to world-writable, allowing local users to redirect traffic to malicious sites.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2018-11053?
CVE-2018-11053 is a medium-severity vulnerability in Dell EMC iDRAC Service Module, published on 26 Jun 2018. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Dell EMC iDRAC Service Module for all supported Linux and XenServer versions v3.0.1, v3.0.2, v3.1.0, v3.2.0, when started, changes the default file permission of the hosts file of the host operating system (/etc/hosts) to world writable. A malicious low privileged operating system user or process could modify the host file and potentially redirect traffic from the intended destination to sites hosting malicious or unwanted content.
Weakness: CWE-732
Which versions are affected by CVE-2018-11053?
It affects 1 product.
Products include Dell Emc Idrac Service Module.
How do I fix CVE-2018-11053?
No fix has been published for CVE-2018-11053 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-11053 being exploited?
There is no known exploitation of CVE-2018-11053 in the wild and no public exploit code.
Other vulnerabilities in Dell EMC iDRAC Service Module
- CVE-2025-38743 Memory corruption in iDRAC Service Module (iSM)
- CVE-2024-22428 Privilege escalation in iDRAC Service Module (iSM)
- CVE-2024-38490 Memory corruption in iDRAC Service Module (iSM)
- CVE-2025-38742 Privilege escalation in iDRAC Service Module (iSM)
- CVE-2024-25947 Memory corruption in iDRAC Service Module (iSM)
Sources
Also known as GHSA-ppf5-mgf6-gfp3.