PT-2014-5307 · Infoblox+1 · Infoblox Netmri+1

Published 2014-07-15 · Updated 2018-10-09 · CVE-2014-3419

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Infoblox NetMRI versions prior to 6.8.5

Description The issue allows local users to obtain access to the system via unspecified vectors, as it has a default password of admin for the root MySQL database account.

Recommendations For versions prior to 6.8.5, update to version 6.8.5 or later to change the default password for the root MySQL database account.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2014-3419

Affected Products

Infoblox Netmri

Mysql Server

References · 8

• 🔥 http://packetstormsecurity.com/files/127410/Infoblox-6.8.4.x-Weak-MySQL-Password.html · Exploit
• 🔥 http://blog.depthsecurity.com/2014/07/os-command-injection-in-infoblox-netmri.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-3419 · Security Note
• https://github.com/depthsecurity/NetMRI-2014-3418 · Note
• http://securityfocus.com/bid/68473 · Note
• http://securitytracker.com/id/1030542 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94450 · Note
• http://securityfocus.com/archive/1/532710/100/0/threaded · Note