CVE-2014-3418

High

Published: 15/07/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

In Infoblox NetMRI before version 6.8.5, a vulnerability allows remote attackers to execute arbitrary commands via shell metacharacters in the skipjackUsername parameter.

Risk Assessment

An attacker could gain access to the system and perform unauthorized operations, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade Infoblox NetMRI to version 6.8.5 or later to mitigate this vulnerability.

Other vulnerabilities in Infoblox NetMRI

CVE-2014-3419High
Infoblox NetMRI before 6.8.5 has a default password of 'admin' for the 'root' MySQL database account, making it easier for local users to gain access via unspecified vectors.

Original NVD description (English source)

config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the skipjackUsername parameter.