CVE-2014-3418

Infoblox Netmri < 6.8.4 - OS Command Injection

Title source: rule
STIX 2.1

Description

config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the skipjackUsername parameter.

Exploits (1)

exploitdb WRITEUP
by Nate Kettlewell · textwebappslinux_x86
https://www.exploit-db.com/exploits/34030

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/68471
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/532709/100/0/threaded
Exploit mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2014/Jul/35
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/34030
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/94449

Scores

EPSS 0.2111
EPSS Percentile 95.7%

Details

CWE
CWE-78
Status published
Products (6)
infoblox/netmri 6.0.2.42
infoblox/netmri 6.1.2
infoblox/netmri 6.2.1
infoblox/netmri 6.2.1.48
infoblox/netmri 6.8.2.11
infoblox/netmri < 6.8.4
Published Jul 15, 2014
Tracked Since Feb 18, 2026