critical10.0Public exploit code
CVE-2014-3418
config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the skipjackUserna…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Infoblox 6.8.2.11 - OS Command Injection2014-07-10 · webapps · linux_x86
Impact
config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the skipjackUsername parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Infoblox | Netmri | through 6.8.4 Versions 6.0.2.42, 6.1.2, 6.2.1, 6.2.1.48, 6.8.2.11 |
Weakness classification
References
- NVD record
- CVE.org record
- http://blog.depthsecurity.com/2014/07/os-command-injection-in-infoblox-netmri.html
- http://seclists.org/fulldisclosure/2014/Jul/35
- http://www.exploit-db.com/exploits/34030
- http://www.securityfocus.com/archive/1/532709/100/0/threaded
- http://www.securityfocus.com/bid/68471
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94449
- https://github.com/depthsecurity/NetMRI-2014-3418
- http://blog.depthsecurity.com/2014/07/os-command-injection-in-infoblox-netmri.html
- http://seclists.org/fulldisclosure/2014/Jul/35
- http://www.exploit-db.com/exploits/34030
- http://www.securityfocus.com/archive/1/532709/100/0/threaded
- http://www.securityfocus.com/bid/68471
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94449
- https://github.com/depthsecurity/NetMRI-2014-3418