Infoblox NetMRI CVE-2015-2033 Command Injection Vulnerability
BID:73423
Info
Infoblox NetMRI CVE-2015-2033 Command Injection Vulnerability
| Bugtraq ID: | 73423 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-2033 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 20 2015 12:00AM |
| Updated: | Feb 20 2015 12:00AM |
| Credit: | Travis Emmert |
| Vulnerable: |
Infoblox NetMRI 6.5.3 Infoblox NetMRI 6.5.2 Infoblox NetMRI 6.5.1 Infoblox NetMRI 6.2.2 Infoblox NetMRI 6.2.1 Infoblox NetMRI 6.1.2 Infoblox NetMRI 6.0.2 42 Infoblox NetMRI 6.8.2.11 Infoblox NetMRI 6.4.0.0 Infoblox NetMRI 6.2.1.48 |
| Not Vulnerable: |
Infoblox NETMRI-23483 0 |
Discussion
Infoblox NetMRI CVE-2015-2033 Command Injection Vulnerability
Infoblox NetMRI is prone to a command-injection vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary commands with root privileges in context of the affected system. Failed exploit attempts will likely result in denial-of-service conditions.
Infoblox NetMRI is prone to a command-injection vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary commands with root privileges in context of the affected system. Failed exploit attempts will likely result in denial-of-service conditions.
Solution / Fix
Infoblox NetMRI CVE-2015-2033 Command Injection Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Infoblox NetMRI CVE-2015-2033 Command Injection Vulnerability
References:
References:
- InfoBlox - NetMRI/Network Automation Remote Command Injection (Travis Emmert)
- NetMRI Homepage (Infoblox)