CVE-2014-3418 config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the skipjackUsername parameter.
HighCVSS 10.0
EPSS 7.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the skipjackUsername parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| infoblox netmri | <= 6.8.4 | No fix listed |
| infoblox netmri | = 6.0.2.42 | No fix listed |
| infoblox netmri | = 6.1.2 | No fix listed |
| infoblox netmri | = 6.2.1 | No fix listed |
| infoblox netmri | = 6.2.1.48 | No fix listed |
| infoblox netmri | = 6.8.2.11 | No fix listed |
References
- blog.depthsecurity.com exploit
- 20140709 CVE-2014-3418 - OS Command Injection Infoblox Network Automation exploit mailing-list
- 34030 exploit
- 20140709 OS Command Injection Infoblox Network Automation mailing-list
- 68471 vdb-entry
- infoblox-cve20143418-command-exec(94449) vdb-entry
- github.com