PT-2014-5307 · Infoblox+1 · Infoblox Netmri+1

Publicado 2014-07-15 · Atualizado 2018-10-09 · CVE-2014-3419

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Infoblox NetMRI versions prior to 6.8.5

Description The issue allows local users to obtain access to the system via unspecified vectors, as it has a default password of admin for the root MySQL database account.

Recommendations For versions prior to 6.8.5, update to version 6.8.5 or later to change the default password for the root MySQL database account.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2014-3419

Produtos afetados

Infoblox Netmri

Mysql Server

Referências · 8

• 🔥 http://packetstormsecurity.com/files/127410/Infoblox-6.8.4.x-Weak-MySQL-Password.html · Exploit
• 🔥 http://blog.depthsecurity.com/2014/07/os-command-injection-in-infoblox-netmri.html · Exploit
• https://github.com/depthsecurity/NetMRI-2014-3418 · Nota
• http://securityfocus.com/bid/68473 · Nota
• http://securitytracker.com/id/1030542 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94450 · Nota
• http://securityfocus.com/archive/1/532710/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-3419 · Nota de Segurança